Epic Games, maker of the Unreal Tournament series of virtual world shooting games, on Tuesday denied reports that it considered filing a lawsuit against a security company that found holes in its products.
The reports began when TechTV.com quoted Epic Games Vice President Mark Rein as saying that several comments made by security firm PivX Solutions were "slanderous" and that Epic would consult with its lawyers.
To the contrary, Epic Games is satisfied with how the security firm handled the issue, Tim Sweeney, president and founder of Epic Games said in an interview with CNET News.com.
PivX "found some security problems and we took way too long to get on them," Sweeney said. "We are not going to sue anyone for finding flaws in our products."
A week ago, PivX released an advisory outlining several problems with games based on the Unreal Engine--Epic's core software for creating the player games--that could allow an attacker to use Unreal servers to attack other computers with a flood of data, or for the worst flaw, take over a computer running the games.
At the time, Epic didn't have a patch available; the programmer who had responsibility for producing a fix dropped the ball, Rein said in an earlier interview.
Sweeney added that such hiccups should be expected of a company handling its first security incident. "This is the procedure that I think companies go through when faced with a security flaw for the first time," he said. "We are definitely establishing standard procedures for handling such flaws in the future."
--By Robert Lemos, source: news.com (CNET)
Article can be read here.
