Re: [Full-disclosure] Bank of the West security contact?

[Jeffrey Walton <noloader@xxxxxxxxx>]

On Sat, Feb 8, 2014 at 6:05 AM, Justin Ferguson <jf@xxxxxxxxx> wrote:
> well, not to be outdone by the RFC parroting and amazing whois. If you
> google "@bankofthewest.com" or "(at)bankofthewest(dot)com" you'll pull
> a bazillion email addresses that you can spam. Alternatively
> cfo@xxxxxxxxxxxxxxxxx cio@xxxxxxxxxxxxxxxxx or
> Kirsten.Garen@xxxxxxxxxxxxxxxxx or Duke.Dayal@xxxxxxxxxxxxxxxxx as
> firstname.lastname@xxxxxxxxxxxxxxxx is the apparent format.
>
> That said, unlike turbo here, I recognize you're looking for confirmed
> contacts, and I don't have any there. He thought you possibly didn't
> know how to whois, I suggested to him that he could also look up their
> CSR number in the phone book, because perhaps you didn't know how to
> do that either; of course, American banks don't actually get that +1
> is a country code.. so, yeah.
You should also provide some of that crack legal advice, too.

Jeff

> On Sat, Feb 8, 2014 at 5:45 AM, Jeffrey Walton <noloader@xxxxxxxxx> wrote:
>> On Sat, Feb 8, 2014 at 12:27 AM, Kristian Erik Hermansen
>> <kristian.hermansen@xxxxxxxxx> wrote:
>>> Anyone have security contact at Bank of the West?
>>
>> You might also try reaching out to Justin Ferguson. The impression I
>> got is he is masterful at infosec; and he can probably put you in
>> touch with someone in about 3 degrees - perhaps even 1 (that beats the
>> snot out of six degrees for other famous people).
>>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/