[Full-disclosure] About IBM
g13net at gmail.com
Mon May 28 00:41:42 BST 2012
Submitting to something like ZDI or Secunia may help in these cases.
On 5/27/12, Jeffrey Walton <noloader at gmail.com> wrote:
> On Sun, May 27, 2012 at 4:51 PM, MustLive <mustlive at websecurity.com.ua>
>> Hello guys!
>> I have a question for you about IBM. Does anybody has successfully
>> them, when they officially answered and fixed vulnerabilities in their
>> software, since Leandro Meiners (since 2005)?
> The question that comes to mind (for me) is what email address(es) did you
> Per RFC 2142, MAILBOX NAMES FOR COMMON SERVICES, ROLES AND FUNCTIONS
> (http://www.ietf.org/rfc/rfc2142.txt), security at ibm.com should be
> monitored. I also suggest secure at ibm.com since Microsoft made it
> somewhat popular (MS was using it around the time the RFC was
> published). There are a few others from the RFC I would use, including
> support, abuse, and noc. For web specific problems, www and hostmaster
> would be included.
> Additionally, the administrative and technical contacts for IBM can be
> found in any WHOIS database.
> I discourage folks from using a web submittal forms since using the
> website can be encumbered with legal terms. I even recall a site (the
> name escapes me) that binds you to a non-disclosure when you use their
> web portal to submit a bug.
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
Sent from my mobile device
Full-Disclosure is hosted and sponsored by Secunia.