News for hackers. Stuff that matters.

A comment on HipChat security notice. Parent comment

Re:HipChat security notice by GrinningFool on Monday April 24, 2017 @05:10PM (#14188326)
When you use any third party library, you're responsible for its behaviors (or misbehaviors) on your customer's machine. How is it possible to view this in any other way?
[ Parent | on HN ]
Re:HipChat security notice by lolsal on Monday April 24, 2017 @05:16PM (#14188373)
I 100% agree with you. Atlassian is 100% responsible. I'm not sure I would not say they are at 'fault' though. Maybe I'm just quibbling over semantics.

I don't know the details of the vulnerability - I would say they were at fault if they did not update/patch a fixed vulnerability.

[ Parent | on HN ]