1. Hi
    Mar 6Sent
     
  2. Hi
     
    Mar 6
  3. So will you be looking for the .fr domains ?
    Mar 6Sent
     
  4. If you have interesting for me of course
     
    Mar 6
  5. Interesting ?
    Mar 6Sent
     
  6. *something
     
    Mar 6
  7. All of the fr domain s are of your govt so I respect that ...you are looking for a quick reply from our govt and .fr domains do not responded for months
  8. So I LL be seeing same kind of tweets which you tweeted for Indian government ?
  9. Or you have some different protocols for other countries ?
    Mar 6Sent
     
  10. No no I mean if you have vulnerabilities in website I'll check it ofc
     
  11. The governmental websites in France finish with
     
    Mar 6
  12. Yes I found it
    Mar 6Sent
     
  13. You mean you have a vulnerability in a website?
     
    Mar 6
  14. You can say that. If you consider the disclosures you did for our sites as vulnerabilities
  15. I am not getting you never came across any vulnerabilities in domains?
  16. And Indian domains you have a bag full of it ?
    Mar 6Sent
     
  17. .fr websites I have 4000+ vulnerability of single type and high profile vulnerability
  18. And on Indian domains those are only 1k
    Mar 6Sent
     
  19. I'm talking about websites
     
  20. Not .fr
     
    Mar 6
  21. Yes this month I came across 20 vulnerable
    Mar 6Sent
     
  22. Did you disclose these issues to ANSSI?
     
    Mar 6
  23. Will contact them
  24. After a while
  25. Mar 6Sent
     
  26. Cool
     
  27. It's an xss
     
  28. ?
     
    Mar 6
  29. are these important sites ?
    Mar 6Sent
     
  30. Yes it is
     
    Mar 6
  31. they are defaced long back by someone and mailed the responsible authority too
  32. why they didt respond
  33. its been mnths
    Mar 6Sent
     
  34. I'm not working for them I don't know
     
  35. Is the XSS still here?
     
    Mar 6
  36. yes
  37. so will you seek answer for this delay in responding from them on twitter ?
    Mar 6Sent
     
  38. Yes of course
     
  39. Can give me the full details
     
    Mar 6
  40. yes sure
    Mar 6Sent
     
  41. I will contact the authority
     
    Mar 6
  42. i will give you the complete url
    Mar 6Sent
     
  43. i would like to see your tweet about these domains ...in same way you shouted for bsnl ..i want to confirn you are not BIASED
    Mar 6Sent
     
  44. Humm
     
  45. What do you mean by biased?
     
  46. Are you sure I'm really French?
     
    Mar 6
  47. no
  48. you are INDIAN
  49. :P
    Mar 6Sent
     
  50. I worked on different stuff
     
  51. Not just indian websites
     
    Mar 6
  52. its not good to leak out about non profilt publci projects of a country .. see govt hires someone from us to check secrurity and you found loopholes in his implementatiion and i can find loopholes even after your disclosures
  53. i ll show youo some day
    Mar 6Sent
     
  54. so do i have right to make fun of your findings ? it will overcome something good that is coming from your disclosures
  55. this is what i am arguing from you from last few days
    Mar 6Sent
     
  56. You have all the rights boy
     
  57. Do what you want...
     
  58. I don't get why you are mad at me
     
    Mar 6
  59. Alright
    Mar 6Sent
     
  60. Yes, my findings was easy to find
     
  61. Yes there is still vulnerabilities in it
     
    Mar 6
  62. If you want to prove that you are clever than me ok no problem
     
  63. In this case disclose your findings
     
  64. And make them fix it
     
    Mar 6
  65. )
    Mar 6Sent
     
  66. Thank you
     
  67. I will send this to ANSSI
     
    Mar 6
  68. i think you said a tweet first
    Mar 6Sent
     
  69. No I'm making responsible disclosure
     
    Mar 6
  70. Why ?
    Mar 6Sent
     
  71. I'm a white hat
     
  72. Not a black hat :)
     
    Mar 6
  73. Then do responsible disclosure for India too
  74. :))
    Mar 6Sent
     
  75. This is what I'm doing
     
    Mar 6

Comments

Post a Comment