Re: SPAM, credit card numbers, what would you do?

["Jonathan A. Zdziarski" <jonathan () nuclearelephant com>]

This must be a piece of software, because I ran into the same exact
thing a few years back on "the guys" websites...e.g. radar-guys.com,
telephone-guys.com, radio-guys.com, cordless-guys.com, etc.  The file
'order.txt' which carried all the credit card numbers and order
information.  This file was dumped daily.

I decided to play good Samaritan and notify them to alert them of this
problem, but since they didn't bother responding I took it upon myself
to notify all the individuals on the list.  Many of them were grateful
and very pissed at the guys.com...many immediately canceled their credit
cards and their orders.  They finally changed it about a month
later...i'm sure they probably just renamed it to orders2.txt or
something lame, and dropped an index.html file in the directory.

Anyway, I don't go around looking for things like this, but if it were
me I would sure love to be notified if my credit card info got out
there.  You reap what you sow.




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html