Re: [Full-disclosure] Who Do I Contact?

["Alice Bryson" <abryson@xxxxxxxxxxxxx>]

i think you may exploit this vuln and get several SSN, and then email
to the institute to show the severity of your report.


2006/4/22, CrYpTiC MauleR <crypticmauler@xxxxxxxxxxxxx>:
> If there is a security hole in a site of an educational institute that 
> exposes social security numbers and they have not fixed it even when told 
> about it. Who can be contacted to get it done? Department of Education? If so 
> anyone know a phone number I can call? Btw this is in the USA.
>
> --
> _______________________________________________
> Check out the latest SMS services @ http://www.linuxmail.org
> This allows you to send and receive SMS through your mailbox.
>
> Powered by Outblaze
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>


--
Homepage: http://www.lwang.org
mailto:abryson@xxxxxxxxxxxxx

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/