News for hackers. Stuff that matters.
Re:Barracuda Urges Replacing – Not Patching – Its Email Secu... by veave on Saturday June 10, 2023 @05:45PM (#36275475)
If this is the mindset of some people it's no wonder that companies would rather deny the problem and stick their heads in the sand.
Re:Barracuda Urges Replacing – Not Patching – Its Email Secu... by insanitybit on Saturday June 10, 2023 @06:12PM (#36275712)
The mindset that changing a system out has risks and that engineers/ops time is very expensive?

I mean, I hear you, it sucks that being honest about the issue is leading to punishment, but rationally this is just how people are going to end up responding. If they really want to avoid this, don't give it to them for free, pay them for it.

Re:Barracuda Urges Replacing – Not Patching – Its Email Secu... by kortilla on Saturday June 10, 2023 @09:37PM (#36277100)
No it’s not. Considering changing vendors because a vendor did the right thing and sent out free replacements for potentially compromised hardware is not something any sane client would do.
Re:Barracuda Urges Replacing – Not Patching – Its Email Secu... by genocidicbunny on Sunday June 11, 2023 @12:10AM (#36277927)
The GP didn't say that though. They said they were already considering replacing one vendor with another, prior to this incident.

As I understood it, the calculus was 'do nothing and keep the current barracuda stuff for a while longer or find another vendor and replace the barracuda stuff?' Now the former option is gone, and the calculus is 'replace current barracuda stuff with barracuda or another vendor?' So if you were already considering switching vendors, now is an opportune time to do so. You're going to be paying the eng/ops cost now anyhow, and as many in this thread have pointed out, one or two fairly off-the-shelf hw appliances are not exactly a big spend.

Re:Barracuda Urges Replacing – Not Patching – Its Email Secu... by kortilla on Tuesday June 13, 2023 @03:24AM (#36306766)
>You're going to be paying the eng/ops cost now anyhow,

No you’re not. The people in this thread saying that have never actually managed technology because a vendor change that also requires a hardware swap is significantly more expensive than the drop in hardware swap.

The only exception to this is if you were already in the middle of the transition and were planning to phase it out shortly anyway.