full-disclosure - Re: Bank of the West security contact?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAH8yC8mG_k_7Uk0-wCk9FMXSf_m03ESVYNh1vQYNx3jiRzyNjg@mail.gmail.com>
Date: Sat, 8 Feb 2014 06:33:39 -0500
From: Jeffrey Walton <noloader@...il.com>
To: Justin Ferguson <jf@...co.net>
Cc: Full Disclosure List <full-disclosure@...ts.grok.org.uk>
Subject: Re: Bank of the West security contact?

On Sat, Feb 8, 2014 at 6:05 AM, Justin Ferguson <jf@...co.net> wrote:
> well, not to be outdone by the RFC parroting and amazing whois. If you
> google "@bankofthewest.com" or "(at)bankofthewest(dot)com" you'll pull
> a bazillion email addresses that you can spam. Alternatively
> cfo@...kofthewest.com cio@...kofthewest.com or
> Kirsten.Garen@...kofthewest.com or Duke.Dayal@...kofthewest.com as
> firstname.lastname@...kofthwest.com is the apparent format.
>
> That said, unlike turbo here, I recognize you're looking for confirmed
> contacts, and I don't have any there. He thought you possibly didn't
> know how to whois, I suggested to him that he could also look up their
> CSR number in the phone book, because perhaps you didn't know how to
> do that either; of course, American banks don't actually get that +1
> is a country code.. so, yeah.
You should also provide some of that crack legal advice, too.

Jeff

> On Sat, Feb 8, 2014 at 5:45 AM, Jeffrey Walton <noloader@...il.com> wrote:
>> On Sat, Feb 8, 2014 at 12:27 AM, Kristian Erik Hermansen
>> <kristian.hermansen@...il.com> wrote:
>>> Anyone have security contact at Bank of the West?
>>
>> You might also try reaching out to Justin Ferguson. The impression I
>> got is he is masterful at infosec; and he can probably put you in
>> touch with someone in about 3 degrees - perhaps even 1 (that beats the
>> snot out of six degrees for other famous people).
>>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/