full-disclosure - How do I contact Vodafone Security?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130422131019.GC22440@debjann.fritz.box>
Date: Mon, 22 Apr 2013 15:10:19 +0200
From: Jann Horn <jann@...jh.net>
To: full-disclosure@...ts.grok.org.uk
Subject: How do I contact Vodafone Security?

Hello,
does anyone know how I can contact Vodafone Security (preferably a
Germany-specific group because I have no idea whether the issue
affects people in other countries, too)?

I sent a mail to security@...afone.de and it didn't bounce (in case
someone from Vodafone is reading this: it was sent from my old
address jannhorn@...glemail.com). In the mail, I told them to reply
within two weeks, and that was 2013-03-28. Well, I got no reply – either
they think it's not an issue and silently dropped the mail, they're
really slow or nobody reads that mailbox. (Or I made some mistake
sending the mail.)

Well, I tried phoning them first (01721212), but the helpdesk person told
me she'd need my password for that (of which I currently don't know
where exactly it is).

So, in case anyone knows how to contact their security guys properly,
please reply. Meh, why can't everyone just respect RFC 2142?

Jann

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/