CERN Computer Security Information

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <link rel="stylesheet" href="/style.css" type="text/css" /> <script type="text/javascript" src="/jquery.min.js"></script> <title>CERN Computer Security Information</title> <script type="text/javascript"> $(document).ready(function(){ // Menu highlight var path = location.pathname.split("/"); if ( path ) { $('#main_menu a[href*="' + path[1] + '"][class!="noselect"]').addClass('selected'); // path[3] = /security/<xxxxx>/ $('#sidebar ul.sidemenu li[class!="noselect"]:has(a[href$="' + path.reverse()[0] + '"])').addClass('selected'); } // Add icon to external links $('a[id!=logo-img]').filter(function() { return this.hostname && this.hostname !== location.hostname; }).after(' <img src="/images/external_link.png" alt="external link" title="external link"/>'); }); </script> </head> <body> <div id="wrap"> <div id="top-bg"></div>  <div id="header"> <div id="logo-text"> <a id="logo-img" href="https://home.cern/"><img src="/images/CERNLogo2.png" width="59" height="59" style="margin: 10px" alt="CERN Logo"/></a><div id="logo-text-big"><a href="/home/en/index.shtml" title="">CERN Computer Security</a></div> </div> <div id="header-logo"><a href="/services/en/emergency.shtml"><img width=335 src="/images/emergency.png" alt="Computer Emergencies"/></a></div> </div>  <div id="header-photo"></div>  <div id="nav"> <ul id="main_menu"> <li><a class="noselect" href="/home/fr/index.shtml"><img src="/images/fr.png" alt="FR"/></a></li> <li><a href="/home/en/index.shtml">Home</a></li> <li><a href="/rules/en/index.shtml">Computing Rules</a></li> <li><a href="/recommendations/en/index.shtml">Recommendations</a></li> <li><a href="/training/en/index.shtml">Training</a></li> <li><a href="/services/en/index.shtml">Services</a></li> <li><a class="secured" href="/reports/en/index.shtml">Reports & Presentations</a></li> </ul> </div>   <div id="content-wrap"> <div id="main"> <h4>Kudos</h4> <p>Just like any other organization, the CERN computer security measures are not always perfect. While we do our best to find all suboptimal configurations, vulnerabilities and weaknesses, sometimes people outside were faster --- and thanks to their excellent ethics reported their findings to us:</p> <ul> <li>These fine researchers: <a href="https://twitter.com/Viss">Dan Tentler</a>, Jan Fili, <a href="https://www.linkedin.com/in/rubensantamarta">Ruben Santamarta</a>, <a href="https://twitter.com/jckhmr_t">Leo McCavana</a>, <a href="https://www.linkedin.com/in/edwinmolenaar/">Edwin Molenaar</a>, <a href="https://www.facebook.com/ImpossibleNitish">Nitish Shah</a>, <a href="https://www.andmp.com">Arif Khan</a>, <a href="https://www.linkedin.com/in/ismailtasdelen/">Ismail Tasdelen</a>, <a href="https://www.linkedin.com/in/enekocruz/">Eneko Cruz Elejalde</a>, <a href="https://twitter.com/fakessh">Serge Lacroute</a>, <a href="https://www.facebook.com/sadikul.official"> Sadikul Islam</a>, <a href="https://www.facebook.com/abhijeet.sarkar.31">Abhijeet Sarkar</a>, <a href="https://twitter.com/alnaeem961">Alwoares (ErrOr SquaD)</a>, <a href="https://www.hackerone.com/r0s3">Safia Noor</a>, <a href="http://twitter.com/sameerphad72">Sameer Phad<a/>, <a href="mailto:mr.axif2000@gmail.com">Muhammad Asif<a/>, <a href="https://facebook.com/asiffarabi000">Asif Hossain</a>, <a href="https://twitter.com/sushiwushi2">iamsushi</a>, Fabian Freyer, <a href="https://twitter.com/prial261">Prial Islam</a>, <a href="https://it.linkedin.com/in/antonio-cannito">Antonio Cannito</a>, <a href="https://www.asafety.fr">Yann CAM</a>, <a href="https://www.linkedin.com/in/simone-la-porta/">Simone La Porta</a>, <a href="https://nowasky.com">Ademar Nowasky Junior</a>, <a href="https://twitter.com/aksquaretech">Arpit Kubadia</a>, <a href="https://cedric.net">Cedric Amand</a>, <a href="https://twitter.com/oomniipotentt">Omar Amin</a>, Vineet Kumar, <a href="https://twitter.com/WHOISshuvam">Shuvam Adhikari</a>, <a href="https://www.linkedin.com/in/edgardokrause/">Edgardo Krause</a>, <a href="https://bugcrowd.com/BugBounty_Anonull">Mark Rosenbaum</a>, <a href="https://twitter.com/haxxm0nkey">Dzmitry Smaliak</a>, <a href="https://in.linkedIn.com/in/pbssubhash">Subhash Popuri</a>, <a href="https://twitter.com/svennergr">Sven Großmann</a>, <a href="https://www.linkedin.com/in/anmolkumar3244">Anmol Kumar</a>, <a href="https://pl.linkedin.com/in/dawid-radzi%C5%84ski">Dawid Radziński</a>, <a href="https://www.linkedin.com/in/emiliano-chareun-1001001/">Emiliano Chareun (11sec)</a>, <a href="https://www.linkedin.com/in/matias-m-bb078b238/">Matias Muniz</a>, <a href="https://www.linkedin.com/in/sergio-cabrera-878766239/">Sergio Cabrera</a>, <a href="https://www.linkedin.com/in/acientwarrior/">Todor Petrov</a>, <a href="https://www.linkedin.com/in/mllamazares/">Miguel Llamazares</a>, <a href="https://www.linkedin.com/in/francisco-palma-esteo">Francisco Palma</a>, <a href="https://www.linkedin.com/in/george-tsimpidas/">Georgios Tsimpidas</a> </li> <li>The HackCERN Team hosted at U Toronto: <a href="https://twitter.com/allansto">Allan Stojanovic</a>, <a href="https://twitter.com/jmbxtr">Jamie Baxter</a>, <a href="https://twitter.com/dcept905">Paul Lariviere</a>, <a href="https://twitter.com/bhohenadel">Brendan Hohenadel</a>, <a href="https://twitter.com/TDotWhiteHat">David Auclair</a>, <a href="https://twitter.com/bitgamble">Jamie Gamble</a>, <a href="https://twitter.com/logicalsec">Stephen Hall</a>, <a href="https://twitter.com/InvokeThreatGuy">Lee Kagan</a> </li> <li>Our colleagues from other CERTs: <a href="https://www.abuse.ch">Abuse.ch</a>, <a href="https://www.melani.admin.ch/melani/en/home.html">MELANI</a>, <a href="http://ren-isac.net/">REN-ISAC</a>, <a href="http://www.switch.ch/de/security/">SWITCH CERT</a></li> <li>Our partners in the <a href="/services/en/whitehats.shtml">CERN WhiteHat Challenge</a>.</li> </ul> <p><b>Thank you very much, guys!!! Really appreciated.</b></p> <p>If you want to report findings to us, please check out <a href="cvd.shtml">resposible disclosure process</a>. </div>    <div id="sidebar"> <ul class="sidemenu"> <li class="noselect"><b><a href="/home/fr/index.shtml"><img src="/images/fr.png"/> Vous préférez le français ?</a></b></li> </ul> <h3>Emergency Response</h3> <ul class="sidemenu"> <li><a href="/services/en/emergency.shtml">What to do in an emergency</a> </ul> <h3>Contact</h3> <ul class="sidemenu"> <li><a href="/home/en/csirt.shtml">How to contact the Computer Security Team</a> <li><a href="/home/en/cvd.shtml">Coordinated Vulnerability Disclosure</a> <li><a href="/home/en/CERN/liaisons.shtml">Departmental & experiment liaisons <img src="/images/bullet_lock.png" alt="CERN login required"/></a> </ul> <h3>About CERN Computer Security</h3> <ul class="sidemenu"> <li><a href="/advisories/advisories.shtml">Advisories</a></li> <li><a href="/home/en/data_sharing.shtml">Data Sharing Guidelines</a></li> <li><a href="/home/en/about.shtml">Security is not complete without you</a></li> <li><a href="/home/en/privacy_statement.shtml">Privacy Statement</a></li> <li><a href="/home/en/kudos.shtml">Kudos!</a></li> </ul> </div>   </div>  <div id="footer-wrap"> <div id="footer-bottom"> © Copyright 2025<strong> <a href="https://cern.ch/security">CERN Computer Security Office</a></strong> <table> <tr> <td id="footer-info-left"> e-mail: <a href="mailto:Computer.Security@cern.ch">Computer.Security@cern.ch</a><br/> Please use the following PGP key to encrypt your messages:<br/> ID: 0x954CE234B4C6ED84<br/> <a href="https://keys.openpgp.org/vks/v1/by-fingerprint/429D60460EBE8006B04CDF02954CE234B4C6ED84">429D 6046 0EBE 8006 B04C DF02 954C E234 B4C6 ED84</a> </td> <td id="footer-info-right"> Phone: +41 22 767 0500<br/> Please listen to the recorded instructions. </td> </tr> </table> </div> </div>  </div>   </body> </html>

CINXE.COM

CERN Computer Security Information