GDI.Foundation (@GDI_FDN) header
GDI.Foundation (@GDI_FDN) profile picture

Non-profit organization. Our mission is to defend the free & open Internet by trying to make it safer. We address security issues via Responsible Disclosure.

The Hague, The Netherlands
Joined July 2012
Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)Photo by GDI.Foundation (@GDI_FDN)
GDI.Foundation retweeted
Shodan now has more than 4 million users! To celebrate we are offering the membership at a discounted price of $4 for the next 24 hours: shodan.io/store/member
109
926
215
1,751
GDI.Foundation retweeted
Replying to @JackRhysider
You can report these issues directly. If you are worried about legal consequences, then there multiple safe channels like bug bounty programs and organizations like @GDI_FDN and @DIVDnl that can help you to make a responsible disclosure/coordinated vulnerability disclosure safely
1
4
GDI.Foundation retweeted
There is a high probability that Citrix ADC servers with no mitigation applied on or after January 9, 2020, have been taken over and their TLS certificates and associated keys have been stolen. [2/2] Please patch AND revoke your certificates.
2
5
2
7
GDI.Foundation retweeted
The Dutch Security Hotline of @DIVDnl made a first analysis of the scan data collected on the night of January 9 to 10 shows that of the more than 700 vulnerable Citrix servers identified in the Netherlands, over 450 used wildcard certificates. [1/2] securitymeldpunt.nl/cases/20…
1
7
8
GDI.Foundation retweeted
Since December, @GDI_FDN has reported over 98 thousand vulnerable Citrix Netscalers to their organizations or their ISP and monitoring over 120 thousand servers. The Dutch Security Hotline of @DIVDnl is reporting vulnerable instances in the Netherlands. securitymeldpunt.nl/2020/01/…
1
29
2
78
GDI.Foundation retweeted
Tim Berners-Lee launches campaign to save the web from abuse trib.al/yG0vxcE
3
40
4
63
A year ago I called for governments, companies & citizens to come together to protect the web as a force for good. Today, we launch the Contract for the Web — the first global plan of action to build the #WebWeWant. Join us. @webfoundation #IGF2019 contractfortheweb.org/action
58
804
162
1,298
#infosec @GDI_FDN is now looking for members and asking all people there in infosec if you have something and if you don't have that interface which helps you show your work, we will be filling that Gap, GDI DMs are always open. :)
1
5
2
2
Some Good News will be coming from GDI.Foundation soon. New opportunities will be opened up for the best deserving. Will keep you updated on this. @GDI_FDN
2
3
WeWork’s weak Wi-Fi security leaves sensitive documents exposed - CNET ift.tt/31zcrrl
GDI.Foundation retweeted
For the Streisand effect to work, this tweet would need to get a heap of attention and RTs... @PogoWasRight has always been an honest, responsible member of the infosec community in my experience and it sucks that she’s on the receiving end of this – at The Las Vegas Strip, Paradise
2
131
4
114
GDI.Foundation retweeted
Chinese #Headhunting Firm FMCes.com Leaks Millions of Resumes & Client Private Data bit.ly/2ESLJ3w #dataprotection #dataprivacy #ElasticSearch #cloud #infosec #HR
GDI.Foundation retweeted
An independent security researcher and member of the @GDI_FDN, discovered an unsecured Elasticsearch #database that exposed the personal information of 8 million people bleepingcomputer.com/news/se… #datasecurity #Cybersecurity @BleepinComputer
So much this! Exactly the kind of collaboration we catalyze at @defcon! Awesome work from @_j3lena_ @0xDUDE @MHV_HITB @SecEvangelism and the hospital receptionist and security team. Safer, sooner, together.
Coming to you from @HITBConf, here’s a feel good story for your weekend, brought to you by @MHV_HITB, @_j3lena_, @0xdude, and gdi.foundation. A happy story about used medical devices, unwiped patient records, and good responses all around. teapawt.net/SecEvangelism/status/1…
6
17
The happiest hacker is one that gets flowers & respect after responsible disclosure @Stef_van_Dop @beauwoods @headinthebooth @0xDUDE @GDI_FDN @DJBusyR @mennovaneck @philips_nl @_j3lena_ @MHV_HITB #HITB2019AMS #MHVHITB 🌹🌻
5
10
2
37
GDI.Foundation retweeted
I was holding on to the medical device while trying the admin password from the Sysprep.inf file. It took me longer (3 hours) than I would like to admit. But I got admin access and was able to pull off actual Dutch patient records from this ”refurbished”, online purchased device. – at Leyden, The Netherlands
1st day of the 1st @MHV_HITB is over ! We has a lot of fun and did great stuff today! Can't wait for tomorrow! They made it happen 🤗 @Stef_van_Dop @beauwoods @headinthebooth @0xDUDE @GDI_FDN @SecEvangelism @DJBusyR @mennovaneck @PhilipsNL & @_j3lena_ #HITB2019AMS #MHVHITB <3
8
34
4
95