JayeLTee

4 ms·

1.
by JayeLTee 2y ago
I just got offered to discuss a "token of appreciation" by another company that included deleting public posts and signing NDAs. I replied saying I don't accept bribes. If that's clear enough for you. And I didn't s
2.
by JayeLTee 2y ago
Although I say: "This server contains over 3,8GB of data exposed including the logins for 16,500 of your users and a lot of PII and credentials, you need to secure access to the server as soon as possible." After all that transpir
3.
by JayeLTee 2y ago
Motivations are stated after I explain why I'm emailing. "I'm an independent researcher who posts under the name JayeLTee. I look for publicly exposed data online on my free time and alert the companies affected to try and cl
4.
by JayeLTee 2y ago
Agreed that the wording to fully understand my intent might not be present on the email and is only achieved when you look at the whole email and what information I provide etc, I've been trying different things to see what works as un
5.
by JayeLTee 2y ago
No I did not query the database after it was fixed.*
6.
by JayeLTee 2y ago
No I did not query the database after it was exposed. The information I had was from when the database was publicly exposed. I don't want to be too specific about the links for the files as I don't know if others accessed this inf
7.
by JayeLTee 2y ago
The alternative universe can be seen on this post: https://jltee.substack.com/p/lcptrackercom-lcptracker-inc-se... The company did reach out and said something similar, I held my publication for months months waiting f
8.
by JayeLTee 2y ago
I think the around 50 public disclosures I did in the last year where I asked 0 times for anything kinda show I'm not looking for any payments. There is a huge issue regarding publicly exposed data that no one seems to want to acknowle
9.
by JayeLTee 2y ago
I told him everything he needed to know to fix the exposure on my initial contact on the exact same email I tell him I'm not asking for anything. I even told him some information about the exposed tables. Backed by the fact that 1 hour
10.
by JayeLTee 2y ago
Not a journalist or a reporter, posts aren't meant to be professional. The only reason I even write any of my posts is because companies DO NOT disclose incidents at all, so I have to do it for them.
11.
by JayeLTee 2y ago
OP here, the one who found the exposed data. Not sure if you read my 2 emails to the company but I would say I was polite to them and was met with accusations of harassment and straight up lies. Don't expect me to pat you in the back i