full-disclosure - Re: Contact for reporting Facebook vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTi=bP=wSLnQ464tfmKiOBoQFMCkw4Q@mail.gmail.com>
Date: Sat, 11 Jun 2011 15:21:02 -0500
From: adam <adam@...sy.net>
To: Madhur Ahuja <ahuja.madhur@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Contact for reporting Facebook vulnerability

In any case, Andrew was correct. This list is the proper place to report it
- as the maintainers will forward the technical details over to Facebook's
staff. If you report it to Facebook yourself, that may be viewed as an act
of rebellion and outright disrespect for both the maintainers of this list,
as well as higher ups over at Facebook. My suggestion is that you follow his
advice and release it directly to the list, leave the Facebook portion to
the list maintainers.

On Sat, Jun 11, 2011 at 2:59 PM, Madhur Ahuja <ahuja.madhur@...il.com>wrote:

> I found the link to form through this forum.
>
> On Sat, Jun 11, 2011 at 3:52 PM, adam <adam@...sy.net> wrote:
> > Absolutely loved that last reply, Andrew.
> > Madhur, you found a form to report security issues to Facebook and
> instead
> > came here, to ask where you should go to report vulnerabilities to
> Facebook?
> > Does that make sense to you?
> >
> > On Sat, Jun 11, 2011 at 2:41 PM, Andrew D Kirch <trelane@...lane.net>
> wrote:
> >>
> >> Nah, report it here, bleach the hat later.
> >>
> >> On 6/11/2011 3:12 PM, Madhur Ahuja wrote:
> >> > Shouldn't I first report to Facebook at
> >> > http://www.facebook.com/help/contact.php?show_form=white_hat
> >> > ?
> >> >
> >> > On Sat, Jun 11, 2011 at 3:10 PM, Andrew D Kirch<trelane@...lane.net>
> >> >  wrote:
> >> >> On 6/11/2011 2:51 PM, Madhur Ahuja wrote:
> >> >>> Does anyone know where I can report vulnerabilities in Facebook ?
> >> >>>
> >> >>> Thanks,
> >> >>> Madhur
> >> >>>
> >> >>> _______________________________________________
> >> >>> Full-Disclosure - We believe in it.
> >> >>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> >>> Hosted and sponsored by Secunia - http://secunia.com/
> >> >> Right here, simply reply to this e-mail.
> >> >>
> >> >> Andrew
> >> >>
> >> >> _______________________________________________
> >> >> Full-Disclosure - We believe in it.
> >> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> >> Hosted and sponsored by Secunia - http://secunia.com/
> >> >>
> >>
> >> _______________________________________________
> >> Full-Disclosure - We believe in it.
> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> >> Hosted and sponsored by Secunia - http://secunia.com/
> >
> >
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/