Quote:
Originally Posted by Krystian Galaj
What's funny is that it wasn't an attack by anyone, Goatse Security discovered a vulnerability, notified AT&T of it, and when AT&T ignored the information (possibly trying to hide the breach), after a few days Goatse prodded AT&T to react by publishing the details.
http://security.goatse.fr/a-response-to-atts-letter
Now they're calling them "malicious hackers"... the idiocy. |
The reports are suggesting that Goatse obtained the email addresses, is that not correct?
There's a difference between discovering a vulnerability and notifying the company, versus actually making use of that vulnerability to download data. Or are the media reports wrong (wouldn't surprise me) and they never did the second part?