FNB small security bug

[mpdjhb]

No good deed goes unpunished. Best to keep it to yourself.

More likely to get a legal letter demanding cease and desist than a thank you.

 

[Herr der Verboten]

Maybe ask this chap

https://www.linkedin.com/in/ettienne-le-roux-71a369132/

kak man. @EvoX knows better about haxoring.

 

[r00igev@@r]

FNB sends all their notifications unencrypted. So if you run ettercap on an ISP aggregation point you can harvest a kukhuis vol useful data.

A 1970s Datsun is more secure than FNB.

 

[shadow_man]

Maybe ask this chap

https://www.linkedin.com/in/ettienne-le-roux-71a369132/

Snort - LinkedIn with some random Linux screengrab showing how l33t he is with 'apt' and 'htop'...

That being said he was at SensePost previously and those guys are usually pretty decent, so maybe he can help.

 

[shadow_man]

You'd make a shocking hacker.
Reason #1 he can help: He works in secops at FNB LMAO

You clearly missed the general theme of this thread - see multiple previous replies which generally indicate FNB can't be bothered to fix things, even when they're well informed.

Joke --> over your head --> you --> whoooosh

 

[bchip]

Hi, does anyone know if FNB offer a reward if you find security issues?
I think i found a small bug, probably not a big deal....(not log4j....)

I once emailed Snapscan with a major security flaw.
Instead of asking me more about it I just got a generic email about that said "thank you..."
and they never queried further about it.
About 2 years later I saw the issue was resolved.

F***** joke

Good luck getting any kinda reward...

 

[shadow_man]

I once emailed Snapscan with a major security flaw.
Instead of asking me more about it I just got a generic email about that said "thank you..."
and they never queried further about it.

F***** joke

Their CTO is too busy being woke, all over LinkedIn Honestly I'm (not) surprised at how many companies ignore this type of thing - it's absolutely crazy!

 

[lkswan747]

How Can We Help You?

 

[Herr der Verboten]

I once emailed Snapscan with a major security flaw.
Instead of asking me more about it I just got a generic email about that said "thank you..."
and they never queried further about it.
About 2 years later I saw the issue was resolved.

F***** joke

Good luck getting any kinda reward...

 

[Thugscub]

I tried to report a huge hole 12 years ago. Got ignored. So fuggem.
Sim swop.