Full Disclosure mailing list archives
Re: SPAM, credit card numbers, what would you do?
From: "Jonathan A. Zdziarski" <jonathan () nuclearelephant com>
Date: Tue, 14 Oct 2003 13:27:07 -0400
This must be a piece of software, because I ran into the same exact thing a few years back on "the guys" websites...e.g. radar-guys.com, telephone-guys.com, radio-guys.com, cordless-guys.com, etc. The file 'order.txt' which carried all the credit card numbers and order information. This file was dumped daily. I decided to play good Samaritan and notify them to alert them of this problem, but since they didn't bother responding I took it upon myself to notify all the individuals on the list. Many of them were grateful and very pissed at the guys.com...many immediately canceled their credit cards and their orders. They finally changed it about a month later...i'm sure they probably just renamed it to orders2.txt or something lame, and dropped an index.html file in the directory. Anyway, I don't go around looking for things like this, but if it were me I would sure love to be notified if my credit card info got out there. You reap what you sow. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- SPAM, credit card numbers, what would you do? ted klugman (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Jonathan A. Zdziarski (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Cael Abal (Oct 14)
- RE: SPAM, credit card numbers, what would you do? Poof (Oct 14)
- RE: SPAM, credit card numbers, what would you do? Curt Purdy (Oct 14)
- RE: SPAM, credit card numbers, what would you do? Jonathan A. Zdziarski (Oct 14)
- RE: SPAM, credit card numbers, what would you do? madsaxon (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Jeremiah Cornelius (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Jeremiah Cornelius (Oct 14)
- RE: SPAM, credit card numbers, what would you do? Poof (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Ron DuFresne (Oct 14)
- Re: SPAM, credit card numbers, what would you do? Jeremiah Cornelius (Oct 14)
- Re: SPAM, credit card numbers, what would you do? /dev/null (Oct 14)