full-disclosure - Who Do I Contact?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060422181653.7E6B07B5EF@ws5-10.us4.outblaze.com>
Date: Sat Apr 22 19:17:20 2006
From: crypticmauler at linuxmail.org (CrYpTiC MauleR)
Subject: Who Do I Contact?

I'm sorry I don't plan on going public with the details of the hole except with school staff and/or law enforcement. Main reason being dont want to put my info and my parents info in any great danger than it already is in. As you know identity theft is one of the fastest growing crimes so I feel that releasing the news before the holes is fixed will do more damage than good.



> ----- Original Message -----
> From: "Brian Eaton" <eaton.lists@...il.com>
> To: full-disclosure@...ts.grok.org.uk
> Subject: Re: [Full-disclosure] Who Do I Contact?
> Date: Sat, 22 Apr 2006 12:52:14 -0400
> 
> 
> On 4/22/06, CrYpTiC MauleR <crypticmauler@...uxmail.org> wrote:
> > I am sorry I am not going to say who the school is. Mainly because so many
> > socials numbers are at risk including mine. I have contacted the 
> > VP of Information
> > Technology and he assured me he would call the company that makes 
> > the website.
> > After 20 days the hole was not fixed, so I called the department heads and am
> > giving them 48 hours from then which is now currently at 24 hours 
> > before I move
> > onto notifying someone else. I was also thinking about contacting 
> > FBI about this
> > seeing they handle school breaches but not sure.
> 
> How about notifying the school newspaper?  Take a tech savvy reporter,
> prove to them the hole exists, and let them get some quotes from the
> VP of IT explaining exactly what the school is doing to fix the
> problem.
> 
> A little sunshine can have some wonderful effects.
> 
> Regards,
> Brian
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

>


-- 
_______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.

Powered by Outblaze