If you have any questions or concerns about this, please don't hesitate to keep them to yourself π€
We at @ConnectWise couldn't care less about what you have to say, just stop complaining and give us all of your money π°π
We are aware that the build servers for the HCP kernel module needed for our R1Soft CDP backup software (also known as @ConnectWise Recover Continuity & Backup) to work on Linux systems have once again been broken for several weeks π
In the meantime, any servers running R1Soft CDP can only use one of the ancient Linux kernel versions supported by the pre-built HCP modules that we haven't updated in over a year.
At @ConnectWise we want to ensure that all of our customers are as horrifically insecure as we are!
@ModulesGarden Remember, only use R1Soft CDP to backup your data if you never want to see it again!
We work hard to make sure that your backups are as slow and unreliable as possible.
@mwulftange of @codewhitesec discovered the original vulnerability in ZK in May, but updating seemed like a lot of work, so everyone here at @ConnecWise just ignored it.
@frycos also tried to let us know in July, but we couldn't be bothered to reply π€·π»ββοΈ
https://t.co/Cnfe0b9XIo
Our @frycos tried hard to responsibly disclose an auth bypass in ConnectWise R1Soft over multiple channels, dropped an unweaponized PoC after months to get attention, suddendly got attention, handed over all details ... just to see the patch release on a friday π€¦ Still: patch βοΈ
It's been a week now, have you all patched against our latest colossal fuckup? π¬
@HuntressLabs explains how our woeful incompetence means that not just your backups, but all of your critical data is at risk at
https://t.co/ENwJEFCUXY
@Spheron1 @ConnectWise@autodesk Our official policy at @ConnectWise is that customers should pay us through the nose so that we can tell them to go fuck themselves.
Are you looking to implement a slow and unreliable backup system? Then check out what we at @ConnectWise can offer you: https://t.co/0n3LQxyrjB
Get in touch with our sales team today so we can overcharge you for our dreadful R1Soft backup software.
@SolaDrive Please remember that you should only use our R1Soft CDP (Crap Data Protection) software for your backups if you never want to be able to restore your data.
If you value your data, then you should use something that actually works instead!
@who_caresboutme @ConnectWise@TheITNation Please remember that the official @ConnectWise R1Soft policy is that our customers should be grateful that we give you the opportunity to pay us for our substandard software. Thatβs why we still donβt support major operating system releases from over two years ago.
@who_caresboutme Sorry, it seems that weβve accidentally put our documentation back online. Weβll make sure that gets taken down again as soon as possible - canβt make life too easy for you plebs!
@SolaDrive Please remember that you should only use our R1Soft CDP (Crap Data Protection) software for your backups if you never want to be able to restore your data.
If you value your data, then you should use something that actually works instead!
@Procter_Chris Sorry, weβre too lazy/incompetent to have working, publicly accessible documentation.
Donβt worry though, our CDP backup software is so utterly dreadful that this is actually an improvement! If you value your data, please look at alternative vendors who actually give a shit.
We've taken our documentation at https://t.co/Y3sv5IxtqH down for "maintenance", but to be honest we probably won't ever bother putting it back up again.
In the meantime, please contact our technical support staff at https://t.co/3V6sQ2KLaG so that we can ignore your request. π
@SolaDrive Please remember that you should only use our R1Soft CDP (Crap Data Protection) software for your backups if you never want to be able to restore your data.
If you value your data, then you should use something that actually works instead!