Congrats are in order today for OpenDNS engineer and security researcher Matthew Dempsky. Though he uncovered a vulnerability in Adobe Flash Player way, way back on Sept. 22, 2008, Adobe has this week acknowledged the bug and committed to fixing it. Much of the attention given to the bug recently was because Adobe had claimed they don’t ship any known crash bugs in Flash and Matthew proved them wrong with his proof-of-concept site: http://flashcrash.dempsky.org/ (This will almost certainly kill any browser not released in the last few months).
This isn’t the first major vulnerability Matthew’s found. Back in February, he uncovered a vulnerability in djbdns and even wrote a patch. Needless to say, OpenDNS is lucky to have him.
Want to work with skilled people like Matthew? We’re hiring in all departments.
Allison Rhodes
Yes, we certainly are lucky to have Matthew.
posted on February 9th, 2010 at 10:54 am
Robert
It is good to read this kind of news. I am also glad that you guys have such a brilliant engineer on your staff. Maybe this time Adobe realizes their Flash Player is not as bug-free as they think it is. And maybe even fix their Flash Player to a point where Apple, Inc. may allow them to install it on the iPhone, iPod Touch, or iPad.
posted on February 9th, 2010 at 12:15 pm
Emanuel
Hey, cool; I read about that, all the way over in Holland (on an IT website, mind you). They didn’t mention he works for you, but that’s good to know!
posted on February 9th, 2010 at 1:56 pm
Web Design Butuan
Adobe should look for talents like your guys over there. Better be safe than sorry.
posted on February 9th, 2010 at 3:08 pm
Randal2k
HTML 5 cannot come quickly enough.
posted on February 9th, 2010 at 4:42 pm
Frank
Chrome took a few seconds to deal with the crash page, and offered to disable the Flash extension. Yay, Chrome.
posted on February 9th, 2010 at 5:24 pm
Brad
It’s unfortunate Adobe like Microsoft only patches things AFTER a major attack is obvious.
I can’t wait for HTML5, as at least its open standards will help fix the security risk company called Adobe.
posted on February 9th, 2010 at 5:45 pm
Jatalon
Congratulations from the customer too. Finally Matthew being recognized is like a reward for the rest of us, common mortals, not so mortals ‘coz we’re DNS customers…
posted on February 10th, 2010 at 2:47 am
Ken Newton
Nice attaboy David…
posted on February 12th, 2010 at 12:01 pm