Hello,<div><br></div><div>I contacted them this morning and they asked me to write down a mail explaining the request, why, etc etc etc.</div><div>That's what I did. If you want a copy of the mail (in french), just contact me in private.</div>
<div><br></div><div>They told me that they will forward the mail to their law departement and I should expect an answer next week.</div><div><br></div><div>Let's cross our fingers ! ;) I'll keep you updated of the situation !</div>
<div><br></div><div>By the way, I'll be at the hackdemocracy this Thursday, April 28, 2011: <a href="http://www.meetup.com/HackDemocracy/events/17010026/">http://www.meetup.com/HackDemocracy/events/17010026/</a></div>
<div><br></div><div>Have a nice day all.</div><meta charset="utf-8"><div><br clear="all">-<b><span style="font-size:13px;line-height:19px;font-family:sans-serif">φ</span>ol d.</b>-<div><font class="Apple-style-span" color="#202020" face="'Droid Sans', arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br>
</span></font></div><br><div class="gmail_quote">On Thu, Apr 21, 2011 at 22:14, Pol <span dir="ltr"><<a href="mailto:d.paolino@gmail.com">d.paolino@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hello,<div><br></div><div>Someone forwarded me the mail from Lennard talking about the revert or not of my commit.</div><div>I wasn't aware of the existence of that mailing list until now.</div><div><br></div><div>Let me explain to all of you how it all began...</div>
<div><br></div><div>One year ago I was looking, for personal purpose, the coordinates of each cell phones antennas in Belgium.</div><div><br></div><div>The first site I found was: <a href="http://www.antennes-gsm.be/" target="_blank">http://www.antennes-gsm.be/</a></div>
<div>But that one seems to be old and no more maintained.</div><div><br></div><div>Then I found the one of IBPT: <a href="http://www.sites.ibpt.be/" target="_blank">http://www.sites.ibpt.be/</a></div><div><br></div><div>
The one you are currently seeing at this address is the new version.</div>
<div>When I first found it, they were using an old version.</div><div><br></div><div>By doing some searches, I found a huge security hole in it.</div><div>I was unemployed at that time and I decided to make an exploit.</div>
<div>The exploit was simple, using HTML and JavaScript, I could manipulate their databases by sending custom queries.</div><div>I'm not a kid and I'm someone who destroy someone else's work, so I contacted them and explained the problem.</div>
<div>The reaction was fast, some days later I was in their offices with my laptop, showing them the problem and the possible solutions.</div><div>I also made a new local proof of concept that it could be done in a nicer and cleaner way.</div>
<div>Unfortunately, they were really kind and say thanks but we do not rely on our team to do the map, we rely on another company and we cannot break the current contract with them.</div><div>Before leaving, I asked to the head of security if it was possible to get a dump of the antennas coordinates in a more easy way to put it on OpenStreetMap and he said that it couldn't be done: "Imaginez ce que pourrait faire qqun de mal intentionné s'il trouve ces données!" which means: "Imagine what could do someone malicious if they finds these datas!".</div>
<div>Which is completely a non sense because those datas can be retrieved from THEIR online website.</div><div>I said him that ! Someone could spot by himself all the antennas and put them on OpenStreetMap. He didn't reply to that one.</div>
<div>So, I leaved, quite sad.</div><div><br></div><div>Some month later, the current new system was in place and the security hole vanished, problem solved.</div><div><br></div><div>With the new system, it's even easier to get their datas.</div>
<div>I decided to save in a file all the data I could get from their map in a file and submit it to OpenStreetMap.</div><div><br></div><div>That's the end of the story.</div><div><br></div><div>It's up to you now to decide if you want to remove them or not.</div>
<div>If you have questions, I'll reply to them on that mailing list.</div><div><br></div><div>Nice evening all.</div><div><br></div><div>-<b><span style="font-size:13px;line-height:19px;font-family:sans-serif">φ</span>ol d.</b>-
</div>
</blockquote></div><br></div>