amuck-landowner

KwiBill

K

KwiceroLTD

New Member
Verified Provider
Aldryic C'boas

Aldryic C'boas

The Pony
What level of liability are you accepting responsibility for should a database full of client contact information end up leaked due to exploit/compromise related directly to the software?
 
MannDude

MannDude

Just a dude
vpsBoard Founder
Moderator
Aldryic C said:
What level of liability are you accepting responsibility for should a database full of client contact information end up leaked due to exploit/compromise related directly to the software?
Click to expand...
What level of liability does WHMCS or ClientExec accept when that happens? Or any other software?

I'd imagine he'd probably just patch the issue, and release a statement, and ideally done as quickly as humanly possible to minimize damage.
 
K

KwiceroLTD

New Member
Verified Provider
Aldryic C said:
What level of liability are you accepting responsibility for should a database full of client contact information end up leaked due to exploit/compromise related directly to the software?
Click to expand...
I offer no warranty on the software, once you buy it if you modify the core code, I accept no liabilities. I will if/once a bug is located, write a patch, test it to ensure it's working, release the patch, post a public announcement to notify every customer to download the patch to prevent compromising of their systems.

I don't suspect SQL injection will be an issue, am using PDO with prepared statements, making sure nothing goes direct into the SQL query. I've put in security for other things like XSS,CSRF,etc. So I don't suspect the core software will be responsible for any exploit/compromise.
 
Last edited by a moderator:
trewq

trewq

Active Member
Verified Provider
KwiceroLTD said:
I don't suspect SQL injection will be an issue, am using PDO with prepared statements, making sure nothing goes direct into the SQL query. I've put in security for other things like XSS,CSRF,etc. So I don't suspect the core software will be responsible for any exploit/compromise.
Click to expand...
Security is always an issue. There is always someone smarter than you.


Have you had your code audited?
 
K

KwiceroLTD

New Member
Verified Provider
trewq said:
Security is always an issue. There is always someone smarter than you.


Have you had your code audited?
Click to expand...
Yes, I have had the code audited by two individuals, if you have someone in mind, I'm willing to have the code audited once more.
 
DomainBop

DomainBop

Dormant VPSB Pathogen
Licensecart said:
@jarland just to let you know mate he hasn't removed you from the directors yet: https://companycheck.co.uk/company/09475165/KWICERO-LTD/directors-secretaries
Click to expand...

^^ I'd get that taken care of quickly because the company's annual return is due in less than 2 months (April 3rd) and if the CEO has disappeared and doesn't file in time then the other directors are liable (UK can impose fines up to  £5,000 and Companies House sends directors nasty letters warning of prosecution for late filing/non-filing)
 
Last edited by a moderator:
jarland

jarland

The ocean is digital
DomainBop said:
^^ I'd get that taken care of quickly because the company's annual return is due in less than 2 months (April 3rd) and if the CEO has disappeared and doesn't file in time then the other directors are liable (UK can impose fines up to  £5,000 and Companies House sends directors nasty letters warning of prosecution for late filing/non-filing)
Click to expand...

I wish I had an ounce of an idea how to actually go about it :(
 
Last edited by a moderator:
DomainBop

DomainBop

Dormant VPSB Pathogen
Last edited by a moderator:
You must log in or register to reply here.
Top
amuck-landowner