Vendor Excuses

Tweeting only premium excuses, deflections, denials, defeatism, back-pedaling, ignorance, and misplaced aggression.

[Vendor Excuses @vendorexcuses]

The bug wasn't ours. It was in an open source project we use, but do not fund or contribute to in any way.

[Vendor Excuses @vendorexcuses]

After careful consideration, we decided to move the backdoor elsewhere. #CatchMeIfYouCan

https://t.co/Zc5jg3iVgN

[Jake Williams @MalwareJake]

Notice to vendors: Next week if your sales dweebs tell me you use deep learning, AI, or machine learning at #RSAC but won't explain how, I'm live tweeting all the fail with hashtag #VendorWordVomit. Naming and shaming. You've been warned.

[Vendor Excuses @vendorexcuses]

Endpoint security isn't important for election systems because we use private networks and "custom databases". Also, you should be more civic minded.
https://t.co/nHTcxKzSXn

[Vendor Excuses @vendorexcuses]

All of our customers are on private networks.

https://t.co/mmDRY4UFHk

[Dale Peterson @digitalbond]

Siemens security solution: keep the bad guys out. The opposite of defense-in-depth, rely solely on perimeter. Time for Profinet to step up like ODVA, OPC & others.

[Vendor Excuses @vendorexcuses]

"your requirements were ambiguous"
https://t.co/9WPUBZH4ez

[Jake Williams @MalwareJake]

Me: will your product fit my requirements?
Vendor: yes
Me: this is not what we asked for...
Vendor: your requirements were ambiguous

[Vendor Excuses @vendorexcuses]

@chrissistrunk @vanhoefm We only accept bug reports on our plain-text FTP server.

[Vendor Excuses @vendorexcuses]

They didn't follow proper procedure when submitting the bug report.

https://t.co/JFng5sSyxA

[Mathy Vanhoef @vanhoefm]

Me: sends PGP encrypted bug report
They: hi your email had strange attachments can you send again

¯\_(ツ)_/¯

[Vendor Excuses @vendorexcuses]

We're violating the GPL? You're violating our terms of use by reversing our code!!

[Vendor Excuses @vendorexcuses]

They ran Coverity on us. Everything was fine.
https://t.co/QRP6Qlepj3

[Vendor Excuses @vendorexcuses]

@ReverseICS I paid good money for that worthless endorsement.

[Vendor Excuses @vendorexcuses]

That product was never designed to be secure. If you wanted security, you should have purchased the bolt-on security module.

[Vendor Excuses @vendorexcuses]

@jadamcrain @scadateer @ReverseICS Me you idiot.

[Vendor Excuses @vendorexcuses]

@scadateer where have I seen this before...

[Vendor Excuses @vendorexcuses]

The egregiously expensive commercial fuzz testing equipment we pay for only tests the server side of our protocols:
https://t.co/3HdGL2On3O