Magento vulnerability analysis

blog.checkpoint.com

22 points·EdwardDiego··10 comments

Would be nice if th people at checkpoint prioritized fixing their broken software instead of putting money on writing (PR) blogs posts.

We use their firewalls and vpn stuff. We literally have to reinstall their vpn software each time we want to connect as it breaks itself after each reboot.

These kind of problems are solved for a long time: use open source software and then you can patch problems yourself if upstream is dead. Any responsible admin will not tolerate closed source black boxes dominating important pieces of infrastructure.

Sometimes you arrive after those black boxes have been bought and paid for.

All the more reason to migrate to a supported solution, if they're already paid for.

(OpenVPN is unbeatable in simplicity and price. I've migrated several pre-AnyConnect Cisco VPN users to it, which was finally EOL'd 2014 after several years neglect.)

I've tried to get OpenVPN to work with a Palo Alto firewall and to date have not been able to, Palo Alto support is - to put it mildly - non-functional.

Would not recommend Palo Alto.

http://magentary.com/kb/apply-supee-5344-and-supee-1533-with...

I think that it is quite surprising how secure Magento has been in the wild, there was a version of community released with a vulnerability that had to be fixed the next day, otherwise all good so far.

I seriously came here thinking this was going to be about the X-men.

My thought too! An analysis based on material science, the prevalence of non-magnetic materials, his ability to fly etc. alas not today.

Magento: leader of the League of Ersatz Mutants.

Reply on news.ycombinator.com