Brandon Haynes wrote Free business advice to PowerDNN: Cost of community-wide PR disaster > $20 * COUNT(Panicked Webmasters) Perhaps it's time for Plan B?

I think that pretty well sums it up.

Tony - From the people I'm speaking to today, and the response I'm seeing here on the forums, many people in the community are perceiving your email blast/news announcement as a fear-based marketing tactic.  Which brings me to another point.

On the "Testimonials" page of the PowerDNN site, you've prominently included a quote that reads "You guys, are great!  Without your support DNN sucks!"  (Yes, someone else's words, not yours right?)  So my question to you Tony - Do you agree with this statement, especially so much so that you have used it as a marketing tool (testimonial) on your site?

I think your answer, not to me, but to everyone in the community who participates with the DNN project - users, team members, consultants, designers, etc. - will have alot to say about your midset and the manner in which you handled the security issue.

Tony,

  There are at least 5 different people who monitor the security@dotnetnuke.com email with 24 hour coverage.  In fact I know that I have special rules setup in outlook just to isolate any email coming into that account so that it can be handled in a timely manner.  You have had time to find the bug, isolate the bug, create a patch for the bug, create a security scanner, make a page and marketing material about the security scanner and make numerous posts about the bug and yet you haven't had time to resend an email that you claim to have sent 2 days ago - or to IM any one of us, whom you've IM'd dozens of times in the past?