Well it's been another week so I feel like I should give everyone an update. I have not touched this at all in the last 10 days. I have spoken with new management (whether this is new management of the company or just new owners of the software is something which has not been shared with me) several times via phone and email and have told them all of my security concerns, I've disclosed everything I've done so far in testing, I've told them about the licensing issues and the potential legal issues which exist with the products that have already been released, and I've even told them what they need to do to fix the security issues and to prevent legal trouble. I have shared with them very valuable information to the success of their endeavor (and I did so here via PMs with Ava in the past, as well), without asking for any form of compensation, and have nothing to show for it. The new management mentioned their interest to get me under an NDA, and they even mentioned that they needed to serve someone a C&D in the past for researching a product of theirs. They have had plenty of opportunities to provide such documents (digitally, at least) and have failed to do so. They wanted to schedule a phone meeting with me, new management, and their software engineer, and they rescheduled the meeting several times before ultimately canceling the meeting 10 days ago. I have not heard from them since. I fear that they have been met with legal obligations.
Although I am not under an NDA, there is some information I have excluded from this post and the last one for the sake of my own legal protection.
HexNail never showed any form of licensing of their proprietary software, and I see no evidence of it on the device's environment, either. Until they disclose otherwise, it is technically legal to distribute the full environment, including the compiled hexnaild software, for free. As I said in the past, any future licensing could possibly be applicable to prior events, so I would still hold off on doing so until more information is known.
I'm trying to help everyone, including manufacturers, but we're all in quicksand until they cooperate.
If it comes down to it, I will continue on my ambition to make an update to share with yall, but if this happens you will be responsible for acquiring the hexnaild software and any other unlicensed components yourself. I will not participate with distribution of the proprietary software in any way until it is licensed properly.
New management: If you're reading this, shoot me an email.
Although I am not under an NDA, there is some information I have excluded from this post and the last one for the sake of my own legal protection.
HexNail never showed any form of licensing of their proprietary software, and I see no evidence of it on the device's environment, either. Until they disclose otherwise, it is technically legal to distribute the full environment, including the compiled hexnaild software, for free. As I said in the past, any future licensing could possibly be applicable to prior events, so I would still hold off on doing so until more information is known.
I'm trying to help everyone, including manufacturers, but we're all in quicksand until they cooperate.
If it comes down to it, I will continue on my ambition to make an update to share with yall, but if this happens you will be responsible for acquiring the hexnaild software and any other unlicensed components yourself. I will not participate with distribution of the proprietary software in any way until it is licensed properly.
New management: If you're reading this, shoot me an email.