4 ms·
People are talking about more responsible disclosure. Is it feasible to even track down the owners of 4,000 different unsecured databases, much less go through
by bcrosby95 6y ago
People are talking about more responsible disclosure. Is it feasible to even track down the owners of 4,000 different unsecured databases, much less go through the whole process with them to ensure the database is properly secured?
- akx 6y agoSome of these attacks leave a calling card sort of thing, e.g. a database with a document that says "hey, lock your stuff up". That's more or less the best you can do without unreasonable effort, and there's no guarantee the database's owners will ever see the extra database unless you also destroy stuff on the way to make them pay attention...
- hinkley 6y agoWhen that SQL Server worm was going around I had three or four different machines spamming my firewall trying to search for more victims, but I was only able to track one of the IP addresses back to contact information. That person was very grateful for the heads up, but the other three were SOL.