full-disclosure - Who Do I Contact?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat Apr 22 18:41:42 2006
From: dodpears at indiana.edu (Doug Pearson)
Subject: Who Do I Contact?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

CrYpTiC,

Hello, this is Doug Pearson from REN-ISAC. I'm not sure what formal
arm-twisting can be done by DoE, because of FERPA, depending on state
laws, etc., but I can offer to add another voice to the complaint and
through our contacts if you wish. 

Who we are: the formal/canned REN-ISAC description is:

The REN-ISAC is an integral part of U.S. higher education's strategy
to improve network security through information collection, analysis,
dissemination, early warning, and response. It is specifically
designed to support the unique environment and needs of organizations
connected to served higher education and research networks, and
supports efforts to protect the U.S. national cyber infrastructure by
participating in the formal ISAC structure.

Details are at http://www.ren-isac.net

You can contact me off-list if you'd like for us to help out.

Doug Pearson
PGP: http://mypage.iu.edu/~dodpears/dodpears_pubkey.asc
Research and Education Networking ISAC
24x7 Watch Desk: +1(317)278-6630, ren-isac@...edu
web: http://www.ren-isac.net

At 04:51 AM 4/22/2006 -0500, CrYpTiC MauleR wrote:
If there is a security hole in a site of an educational institute
that exposes social security numbers and they have not fixed it even
when told about it. Who can be contacted to get it done? Department
of Education? If so anyone know a phone number I can call? Btw this
is in the USA.

- -- 
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBREpp1NyhuUFqTJNkEQLR1ACfXOvbng1sWVEn6CI5ySpTiKCr6G8An19x
F6Wz+8aTz8wx2/lh8Eivhvsc
=sxJW
-----END PGP SIGNATURE-----