full-disclosure - Re: Two biggest Indian University Websites are vulnerable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 17 Jul 2010 17:33:44 +0530
From: Sandeep Sengupta <sandeep.sengupta@...il.com>
To: Shreyas Zare <shreyas@...fence.com>
Cc: Full-Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Two biggest Indian University Websites are
	vulnerable

1. we spoke to Univ system admin over the phone yesterday. They are
aware of the problem. Now upto them how much time they will take to
rectify it. We hope they atleast have the wisdom to bring the site
down till it is debugged. They have the wisest men working for them,
after all.

2. In reply to other email from Benji, discovery consists of what
everyone has seen & thinking what nobody has thought. I had the option
of keeping quiet, but that would have kept the issue lingering &
hundreds of students would have suffered. Univ officials need to wake
up fast.

3. The matter has been published by press today morning. I have put on
full disclosure more than 12 hours later.

Warm regards,
Sandeep

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/