Good people, Someone please shed some light on this, if one finds some stupid serious mistakes in some government apps, who should these errors be forwarded to? In this day and age, who writes queries such as "SELECT * FROM ..."? Or uses the default username for the database?
Peter, now I'm curious - which website(s) are you referring to? On Tue, May 17, 2011 at 3:00 PM, Peter Karunyu <pkarunyu@gmail.com> wrote:
Good people, Someone please shed some light on this, if one finds some stupid serious mistakes in some government apps, who should these errors be forwarded to?
In this day and age, who writes queries such as "SELECT * FROM ..."?
Or uses the default username for the database? _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
@Andrew, I stumbled upon one of those nasty little errors which reveal your database type and name, its username, the aforementioned queries, the operating system the whole shebang is running on... @Imelda, u serious? :-) On Tue, May 17, 2011 at 4:55 PM, Andrew Ouko <andrewouko@gmail.com> wrote:
Peter, now I'm curious - which website(s) are you referring to?
On Tue, May 17, 2011 at 3:00 PM, Peter Karunyu <pkarunyu@gmail.com> wrote:
Good people, Someone please shed some light on this, if one finds some stupid serious mistakes in some government apps, who should these errors be forwarded to?
In this day and age, who writes queries such as "SELECT * FROM ..."?
Or uses the default username for the database? _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
On Tue, May 17, 2011 at 17:28, Peter Karunyu <pkarunyu@gmail.com> wrote:
@Andrew, I stumbled upon one of those nasty little errors which reveal your database type and name, its username, the aforementioned queries, the operating system the whole shebang is running on...
Were you able to extract data that would reveal a compromised system? Or you just want to inform them to hide everything?:)
@Imelda, u serious? :-)
I think Imelda is serious. Seriously though, Karunyu, is it an offence to just expose the rot? Just do it!! -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. Please consider the environment before printing this email.
@Peter I think the government spokesman On Tue, May 17, 2011 at 3:00 PM, Peter Karunyu <pkarunyu@gmail.com> wrote:
Good people, Someone please shed some light on this, if one finds some stupid serious mistakes in some government apps, who should these errors be forwarded to?
In this day and age, who writes queries such as "SELECT * FROM ..."?
Or uses the default username for the database? _______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------ Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (4)
-
Andrew Ouko -
Imelda Mueni -
Odhiambo Washington -
Peter Karunyu