3 ms·
I just did some searching, and found something similar. I cam across a Samba share for a company that has no security on it whatsoever. I can't tell who it is
by 7ewis 10y ago
I just did some searching, and found something similar. I cam across a Samba share for a company that has no security on it whatsoever.
I can't tell who it is specifically, without opening up any of the files, but it's either the brand, or a franchise of it.
I'm guessing I shouldn't connect to, or open anything on there due to 'unauthorized access'? But then I cannot report it either... guess it's their bad luck then?
Edit: Ok, so I found out the owner by running a whois on the IP. It's not who I initially thought it was, but after researching the company they're worth just over $3m... too worried to report it though, I've never reported any findings like this before.
- bestnameever 10y agoWhy not forward it to the technical contact of the domain and/or ip address?
- ethbro 10y agoSign up for a disposable email account using Tor, then email blast a single email with all the details for reproducing the vulnerability to every official email address you can find, including a note that this is an anonymous address and there will be no further contact. The larger problem is what percentage of companies with glaring vulnerabilities in their infrastructure have the competence to fix them?
- themartorana 10y agoThis is sad. Probably smart, but the culture jerk companies and DAs have bred is one of rightfully fearing being the messenger because he always gets shot.
- tetrep 10y agoi don't see any contact info in your profile, but i'll report it for you? (not that you have any particular reason to trust me, just thought i'd offer to take the "heat")