Vodacom security hole - whom to contact?

[YellowRandolf]

I found quite a big security hole / vulnerability in a vodacom operated website and I'd just like to know who to contact about it.

I'm currently not inside SA, so calling any hotline is no option. I have just send some email to vodacom contacts using web forms, but I can't find an explicit contact for security relate issues. Anyone else experienced similar problems?

 

[mancombseepgood]

Just post it here if you don't get an answer

 

[xrapidx]

Yeh...we'll fix it

 

[vodacom3g]

I found quite a big security hole / vulnerability in a vodacom operated website and I'd just like to know who to contact about it.

I'm currently not inside SA, so calling any hotline is no option. I have just send some email to vodacom contacts using web forms, but I can't find an explicit contact for security relate issues. Anyone else experienced similar problems?

Well you e-mailed and PM'd so many people about it, we have 10 different people looking at it at the moment!

I've escalated to the correct people already.

Thanks very much for the heads-up.

 

[mancombseepgood]

Lawl, That's what happens when you dont reply to email

 

[vodacom3g]

Lawl, That's what happens when you dont reply to email

Well gunni PM'ed me at 4:48 this morning. Even I normally sleep by that time.....

He then posted above 13 minutes later, not exactly a decent period in which to respond...

But we're on it and owe gunni one....

 

[mancombseepgood]

Well gunni PM'ed me at 4:48 this morning. Even I normally sleep by that time.....

He then posted above 13 minutes later, not exactly a decent period in which to respond...

But we're on it and owe gunni one....

Lol... why the reply at after 10 am then?

 

[vodacom3g]

Lol... why the reply at after 10 am then?

To be honest I did not see the post. For some reason, my browser often 'unbolds' new posts, so when I do a quick scan to check for new posts, I miss them.

Gulli actually indicated in the PM he will not post it.....and said he's travelling and can be reached on e-mail.....

 

[xrapidx]

Lol... why the reply at after 10 am then?

Probably cause he has a job...

 

[mancombseepgood]

I'm just having alot of fun here guys...

 

[vodacom3g]

I'm just having alot of fun here guys...

noticed....

 

[mancombseepgood]

4am.. *cough* hope they pay you to work then...

 

[vodacom3g]

4am.. *cough* hope they pay you to work then...

I normally stay up quite late so someone can keep ic company....

 

[YellowRandolf]

As soon as all the bugs are fixed I'll publish a blog post about it on http://randolf.jorberg.com/ - gonna make some waves...


edit: I never published it - too busy with other stuff and Vodacom fixed the bug

 

[Prometheus]

To be honest I did not see the post. For some reason, my browser often 'unbolds' new posts, so when I do a quick scan to check for new posts, I miss them.

Gulli actually indicated in the PM he will not post it.....and said he's travelling and can be reached on e-mail.....

Use Opera.