Good day all,
Just posting this here because the original post may get deleted soon. I personally looked at this product a number of times but it never felt right that they attract customers to their Community Edition that is not maintained and is using a version of CodeIgniter that is 15 years old.
Thanks to ScITGmbH who writes on their forum:
"While reviewing ASTPP 6.0 Community Edition before putting it into production, we found code that collects personal data of all active accounts plus details about the server, and sends them once a day to a server of the vendor. We found no mention of this in the repository’s documentation or in the installation guide, and the admin interface has no setting for it."
forum.astppbilling.org
I'm surprised that ScITGmbH was able to post this as most of the time posts are reviewed.
The above is subsequent to a security advisory posted here https://forum.astppbilling.org/t/se...nomaly-detected-in-version-6-0-community/3053 .
Attached is a PDF of the forum page, as well as a zipped archive of the page "Firefox Web Page, Complete.
Regards.
Edit: Can't upload the zip due to file size limit.
Just posting this here because the original post may get deleted soon. I personally looked at this product a number of times but it never felt right that they attract customers to their Community Edition that is not maintained and is using a version of CodeIgniter that is 15 years old.
Thanks to ScITGmbH who writes on their forum:
"While reviewing ASTPP 6.0 Community Edition before putting it into production, we found code that collects personal data of all active accounts plus details about the server, and sends them once a day to a server of the vendor. We found no mention of this in the repository’s documentation or in the installation guide, and the admin interface has no setting for it."
ASTPP 6.0 sends data about all your customers to the vendor every day (dcoll.inextrix.com)
While reviewing ASTPP 6.0 Community Edition before putting it into production, we found code that collects personal data of all active accounts plus details about the server, and sends them once a day to a server of the vendor. We found no mention of this in the repository’s documentation or in...
forum.astppbilling.org
I'm surprised that ScITGmbH was able to post this as most of the time posts are reviewed.
The above is subsequent to a security advisory posted here https://forum.astppbilling.org/t/se...nomaly-detected-in-version-6-0-community/3053 .
Attached is a PDF of the forum page, as well as a zipped archive of the page "Firefox Web Page, Complete.
Regards.
Edit: Can't upload the zip due to file size limit.
Last edited:
