full-disclosure - [FD] Suspect arrested who used Heartbleed to infiltrate the Canada Revenue Agency (Our IRS)

Open Source and information security mailing list archives

Message-ID: <CAFB0D2Ruzf-tc0HPRLrEQZ-PYdke8t_4hQ3gXvqbDE6N6jLMuQ@mail.gmail.com>
Date: Wed, 16 Apr 2014 14:27:05 -0400
From: Justin Bull <me@...tinbull.ca>
To: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: [FD] Suspect arrested who used Heartbleed to infiltrate the Canada
 Revenue Agency (Our IRS)

Some 19 year old kid used heartbleed to gain access to the CRA systems and
purge 900 SINs (akin to SSN) from the agency.

What a fool.

http://www.theglobeandmail.com/news/national/rcmp-charge-teen-in-relation-to-alleged-heartbleed-bug-theft/article18041007/#dashboard/follows/

-- 
Best Regards,
Justin Bull
E09D 38DE 8FB7 5745 2044 A0F4 1A2B DEAA 68FD B34C

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives