Re:Websmart, Inc. and 100,000 Vulnerable Websites
by jackalope on Tuesday December 03, 2013 @09:37PM
(#6844634)
Now imagine that the local news outlet displayed a list of addresses of the homes than can be easily opened without a key. That's closer to what happened here. The disclosure was irresponsible. He could have contacted each site owner individually with information limited to their site. Instead, he sent a mass email to total strangers, putting some of them at risk, then blogged about it. That's stupid and inconsiderate.
[ Parent
| on HN ]
Re:Websmart, Inc. and 100,000 Vulnerable Websites
by thekevan on Tuesday December 03, 2013 @09:46PM
(#6844664)
No, he notified 11 of the vulnerable parties and failed to blind CC them.
Re:Websmart, Inc. and 100,000 Vulnerable Websites
by markdown on Tuesday December 03, 2013 @10:00PM
(#6844717)
And now, realizing the danger they are in, they fix the door or harass their vendor into doing it. Finally, thanks to the efforts of one good samaritan, they're safe.
Re:Websmart, Inc. and 100,000 Vulnerable Websites
by adriancooney on Tuesday December 03, 2013 @10:05PM
(#6844735)
Who each have to go through the contractor to get them fixed resulting in a bottleneck. Thieves are already running rampant at the disclosure while the contractor is frantically fixing the windows.
Re:Websmart, Inc. and 100,000 Vulnerable Websites
by markdown on Wednesday December 04, 2013 @04:49AM
(#6845946)
An unfortunate series of events, but the poor homeowners are glad it happened, because now they see their contractor for the careless, incompetent fool that he is.
They vow never again to put their families at risk by letting him near their house.
They find a better contractor.