RE: Informing Companies about security vulnerabilities...

["Michael Scheidell" <scheidell () secnap net>]

Run, hide, duck.

You may have violated federal law by doing your tests.

By involving your school, you may have exposed them to civil penalties.

Don't touch someone else's web site without written permission.

(reminds me of the company that 'accidentally' found vulnerabilities in
a military network.
The very next day, 21 FBI agents came in and took away every computer,
disk, tape and scrap of paper in their office)

You may want to ask a lawyer instead of a bunch of 'I pretend to be one'
folks.




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------