How Do You Report A Security Hole?

from the difficulties dept

A SecurityFocus article about how Guess (the fashion company) had a security hole in their server that let people access their customers’ credit card records. As they say, this “credit cards exposed” story is quickly becoming the “dog bites man” story of the internet. A different one appears every few days. The interesting part of this story was how the guy who discovered the hole couldn’t get to the right person at Guess to fix the hole. He sent emails that were ignored. He called and was transferred around and dumped off into voicemail. There isn’t a standard person or method for contacting companies about security holes, and some people are suggesting that maybe their should be. Instead, what usually seems to happen is that after a few useless attempts, whoever found the hole ends up going public to the media – and then no one is happy.

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “How Do You Report A Security Hole?”

Subscribe: RSS Leave a comment
1 Comment
MeV says:

You get more results with a kind word and a 2x4...

than with a kind word alone.

Companies who don’t have some way of reporting security breaches should have their problems aired in public. Even M$ had security holes into their network and the one who found them months back had notified them only to still have them around until recently.

Sometimes embarressment can be an excellent motivator (along with depressed stock prices, a pink slip, or 2×4)…

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...