Interview with Robert Baptiste aka Elliot Alderson [@fs0c131y]
summary
A security researcher reports finding multiple exploitable flaws across Indian services including the Aadhaar app and several department sites, observes many leaks come from third parties and exposed open directories, and says repeated attempts at contact often get no reply while some teams do patch when reached; one incident goes from public disclosure to fixed in three hours, so the recommended path is responsible disclosure via a secure VDP channel (ncipc dot in).
AI-written summary · about
chapters (7)
- 0:00Introduction and background
- 3:11Why focus on India
- 9:23Reporting issues to government
- 15:22Stories and audience Q&A
- 20:36Fixing vulnerabilities quickly
- 22:11Choosing targets for research
- 23:46Official vulnerability disclosure channel
related talks
26mGap between the FOSS approach, infosec research, & how the Indian Govt functions
32mBuilding a secure future using DEVSECOPS practices and technologies
55mBreaking and Fixing Web Application Security
37mStranger Danger: Finding Security Vulnerabilities Before They Find You!
58mPanel Discussion - The Risks of Requiring Premature Vulnerability Disclosures
31mHear no Evil, See no Evil, Code no Evil ();
41mPlenary session
46mKeynote: Lessons From 11 Billion Breached Records