People in glass houses, ....

Filed under the people in glass houses, shouldn't throw stones banner, comes this tidbit from Brian Krebs at the Washington Post.  It seems a Russian Security blog by Valery Marchuk, http://www.securitylab.ru, has posted a list of sites that have vulnerabilities around cross-site scripting flaws.  These vulnerabilities make it easy for phishers and other hackers to use these URLs in scams to get people to give up their legitimate personal and financial data.  Low and behold among the sites listed is none other than eEye Digital Security.  For those who may not know, eEye is a company that has made their bones by exposing vulnerabilities in other security companies products.  You can read more about it (if you read Russian) here.  I wonder what their Chief Hacking Officer is going to say about this. 

By the way, eEye was not alone, other sites and companies including Verisign, Cisco, Snort.org and even the NSA were listed as being guilty of the above.  Scary stuff!