[Full-disclosure] What makes Yahoo! a good merger candidate?

[Paul Schmehl]

--On Wednesday, February 06, 2008 11:58:31 +0100 Vincent van Scherpenseel 
<mailinglists at syn-ack.org> wrote:
>
> So, what do you do when you want to report something like this? In fact
> I'm doing them a favor by reporting but all I got is this lousy
> response. I'll have to think twice about reporting something like this
> next time...
>
> Does anyone know an Yahoo! security contact that actually does his job?
>

You do this the old fashioned way.

# dig -t MX yahoo.com

; <<>> DiG 9.3.3 <<>> -t MX yahoo.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10018
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 7, ADDITIONAL: 14

;; QUESTION SECTION:
;yahoo.com.                     IN      MX

;; ANSWER SECTION:
yahoo.com.              1058    IN      MX      1 g.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 a.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 b.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 c.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 d.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 e.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 f.mx.mail.yahoo.com.

# telnet f.mx.mail.yahoo.com 25
Trying 209.191.88.247...
Connected to f.mx.mail.yahoo.com.
Escape character is '^]'.
220 mta378.mail.mud.yahoo.com ESMTP YSmtp service ready
EHLO hostname.utdallas.edu
250-mta378.mail.mud.yahoo.com
250-8BITMIME
250-SIZE 31981568
250 PIPELINING
MAIL FROM: testing at utdallas.edu
501 Syntax error in parameters or arguments
MAIL FROM: <testing at utdallas.edu>
250 sender <testing at utdallas.edu> ok
RCPT TO: abuse at yahoo.com
501 Syntax error in parameters or arguments
RCPT TO: <abuse at yahoo.com>
250 recipient <abuse at yahoo.com> ok
RCPT TO: <security at yahoo.com>
250 recipient <security at yahoo.com> ok
RCPT TO: <support at yahoo.com>
250 recipient <support at yahoo.com> ok
RCPT TO: <mail-abuse at yahoo.com>
250 recipient <mail-abuse at yahoo.com> ok
quit
221 mta378.mail.mud.yahoo.com
Connection closed by foreign host.

Pick your poison.

-- 
Paul Schmehl (pauls at utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/