Keeper Security files lawsuit against Ars Technica

[Fabricio20]

Tavis Ormandy, member of Google's Project Zero just tweeted about a Lawsuit filed by Keeper Security (Keepass) against Ars Technica on "Misleading Claims" for their "Windows Bundled App" Article.

 

On the original article by Ars Technica, they describe how Tavis Ormandy (re)discovered a flaw on Keepass after noticing that windows 10 was bundling the app after installation. According to Tavis, the flaw was exactly the same as one he had perviously disclosed (Issue 917), which had been patched by Keepass (back on August 2016).

 

Quote

I remember filing a bug a while ago about how they were injecting privileged UI into pages

Quote

I checked and, they're doing the same thing again with this version.

 

The article also indicates that this issue could have been avoided if Windows wasn't downloading the app without the user's consent, as it should only affect users that accepted to use the app by trusting it with their passwords.

 

Quote

Windows 10 users wouldn't have been vulnerable unless they opened Keeper, trusted it with their passwords, and followed prompts to install the browser plugin.

 

Today, however, Tavis Ormandy tweeted about the lawsuit which has been filed by Keeper Security (Owner of Keepass) against Ars Technica, this was followed by a link to the public case and later by the case's document.

 

Original Tweet: https://twitter.com/taviso/status/943532596012638208

 

Case:

https://www.pacermonitor.com/public/case/23282996/Keeper_Security,_Incv_Goodin_et_al

 

Document:

https://www.documentcloud.org/documents/4333677-Keeper-Security-Inc-v-Goodin-et-al.html

 

The document reads:

Quote

On December 15, 2017 the ARS technica website made false and misleading statements about the Keeper sfotware Application suggesting that it had a 16-month old bug that allowed sites to steal users password.

Following with a claim for defamation, after acknowledging that Ars Technica had corrected some "Misleading Claims" on their article at least twice.

[Matu20]

So website lied and is somehow liable for the claim and can be brought to court? Doesn't freedom of speech apply?

[Fabricio20]

Freedom of media/press that is, I guess "instead" of fixing their issue they decided to fix their public image?

[Cyracus]

4 minutes ago, Matu20 said:

So website lied and is somehow liable for the claim and can be brought to court? Doesn't freedom of speech apply?

freedom of speech protects one from prosecution by the government for what one says, the government isn't sueing ars technica so the first amendment doesn't apply