full-disclosure - Re: What makes Yahoo! a good merger candidate?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 06 Feb 2008 10:44:10 -0600
From: Paul Schmehl <pauls@...allas.edu>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: What makes Yahoo! a good merger candidate?

--On Wednesday, February 06, 2008 11:58:31 +0100 Vincent van Scherpenseel 
<mailinglists@...-ack.org> wrote:
>
> So, what do you do when you want to report something like this? In fact
> I'm doing them a favor by reporting but all I got is this lousy
> response. I'll have to think twice about reporting something like this
> next time...
>
> Does anyone know an Yahoo! security contact that actually does his job?
>

You do this the old fashioned way.

# dig -t MX yahoo.com

; <<>> DiG 9.3.3 <<>> -t MX yahoo.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10018
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 7, ADDITIONAL: 14

;; QUESTION SECTION:
;yahoo.com.                     IN      MX

;; ANSWER SECTION:
yahoo.com.              1058    IN      MX      1 g.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 a.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 b.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 c.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 d.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 e.mx.mail.yahoo.com.
yahoo.com.              1058    IN      MX      1 f.mx.mail.yahoo.com.

# telnet f.mx.mail.yahoo.com 25
Trying 209.191.88.247...
Connected to f.mx.mail.yahoo.com.
Escape character is '^]'.
220 mta378.mail.mud.yahoo.com ESMTP YSmtp service ready
EHLO hostname.utdallas.edu
250-mta378.mail.mud.yahoo.com
250-8BITMIME
250-SIZE 31981568
250 PIPELINING
MAIL FROM: testing@...allas.edu
501 Syntax error in parameters or arguments
MAIL FROM: <testing@...allas.edu>
250 sender <testing@...allas.edu> ok
RCPT TO: abuse@...oo.com
501 Syntax error in parameters or arguments
RCPT TO: <abuse@...oo.com>
250 recipient <abuse@...oo.com> ok
RCPT TO: <security@...oo.com>
250 recipient <security@...oo.com> ok
RCPT TO: <support@...oo.com>
250 recipient <support@...oo.com> ok
RCPT TO: <mail-abuse@...oo.com>
250 recipient <mail-abuse@...oo.com> ok
quit
221 mta378.mail.mud.yahoo.com
Connection closed by foreign host.

Pick your poison.

-- 
Paul Schmehl (pauls@...allas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/