Microsoft Security Response Center

Printable View

July 8th, 2003, 02:06 PM
tampabay420

Microsoft Security Response Center

Quote:

-----BEGIN PGP SIGNED MESSAGE-----

Periodically we hear people say they tried to contact Microsoft about
a product or service vulnerability and that Microsoft didn't respond.
We are concerned that people may not know how to report security
vulnerabilities to Microsoft.

The Microsoft Security Response Center investigates all reports of
security vulnerabilities affecting Microsoft products. If you believe
you have found a security vulnerability affecting a Microsoft
product, we'd like to work with you to investigate it.

You can contact the Microsoft Security Response Center by emailing
[email protected] directly, or you can submit your report via our
web-based vulnerability reporting form located at
https://www.microsoft.com/technet/tr...rl=/technet/se
curity/bulletin/alertus.asp.

Sincerely,
Microsoft Security Response Center

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQEVAwUBPwSbDI0ZSRQxA/UrAQH63Af/b+QJk1jCTiTBkNIpphqSOlA5tFgqYkBf
Iip5FnEXF/2QJsW8YVbmupnLnnH2ig8HxzpVqzGZ69QhYttpNmmf8v35NcGQAdcU
fYEKDl2SJxLxPiUPo6kAcO0yh/b37o/yqT/dfySn1gI2JDVCmhcOD/UM0eYEayIQ
yH24oxAJVNGy88SZXd41zU3BSz61hyAmeQOLOuHkUIG9FWSMUaT0MA7dr6wdyI7Q
ofCyhx+hmIC2RIShyhNu9Nt2xl+f8iJajzn9VorpsqrYCx/Pf8CixfL5di2HZUaN
kqWBimMETruC0P16quVzFZcKxCaPi+qJg4qt30oc1R1B+votptMlAA==
=PkAX
-----END PGP SIGNATURE-----

taken from bugtraq...
July 8th, 2003, 02:10 PM
tonybradley

Thanks for the heads up.

More companies should do something like that- clearly define a single point of contact (SPOC) for reporting security issues.

It would be nice if there was a directory of such SPOC's listed at the security sites like SecurityFocus or even on the AO main page in the links on the right side of the screen.

Maybe something like that already exists and I am just clueless, but I do hear all the time people saying that they tried to report an issue and that they couldn't figure out who to contact or their message fell on deaf ears.
July 8th, 2003, 04:52 PM
Computernerd22

Quote:

-----BEGIN PGP SIGNATURE----- iQEVAwUBPwSbDI0ZSRQxA/UrAQH63Af/b+QJk1jCTiTBkNIpphqSOlA5tFgqYkBf
Iip5FnEXF/ 2QJsW8YVbmupnLnnH2ig8HxzpVqzGZ69QhYttpNmmf8v35NcGQ
AdcU
fYEKDl2SJxLxPiUPo6kAcO0yh/b37o/yqT/dfySn1gI2JDVCmhcOD/UM0eYEayIQ
yH24oxAJVNGy88SZXd41zU3BSz61hyAmeQOLOuHkUIG9FWSMUa
T0MA7dr6wdyI7Q
ofCyhx+hmIC2RIShyhNu9Nt2xl+f8iJajzn9VorpsqrYCx/Pf8CixfL5di2HZUaN
kqWBimMETruC0P16quVzFZcKxCaPi+qJg4qt30oc1R1B+votpt
MlAA==
=PkAX

Hey Tampabay420 can you please post what the "above states" in english instead of encryption. I'm on a friends computer system and hes being a lamer and wont let me download PGPv8 so I can see what it says. Thank you, ComputerNerd22 and Tony Bradley (Its an honor to chat with you dude), that site is excellent has a lot of valuable everything. But does this look familiar? http://www3.bannerspace.com/adimages/86015.gif
July 8th, 2003, 06:40 PM
tampabay420

thats the digital signature... it's used to verify the email's validity
July 8th, 2003, 06:48 PM
tonybradley

Quote:

Tony Bradley (Its an honor to chat with you dude), that site is excellent has a lot of valuable everything. But does this look familiar? http://www3.bannerspace.com/adimages/86015.gif

Actually - no it doesn't look familiar. When I first tried to look at the link I got a blank page.

The reason is that I run ZoneAlarm Pro so I never see any pop-up or pop-under ads on web sites or even banner ads- they are all blocked.

I am well aware that About.com is pop-up hell. Even though they make money from the advertising and I get paid by them I have written an article on how to block the ads and I have links to a number of freeware pop-up blockers.

I highly recommend that people visit my site- but I recommend even more that everyone run some sort of pop-up ad blocker.
July 8th, 2003, 07:39 PM
tampabay420

Quote:

visit my site- but I recommend even more that everyone run some sort of pop-up ad blocker.

he he :D now how would the execs over there at about.com feel about your statement ;) j/k
July 8th, 2003, 07:46 PM
tonybradley

I think just about every Guide at About.com has some sort of pop-up blocker installed. We have to try and work on the site which is a royal pain in the ass with a new window popping up every 5 seconds.

Web sites, including About.com, need to find some less-annoying, less-intrusive means of advertising. In general I am OK with banner ads, but I don't want any windows opening and cluttering my desktop or stealing the focus from what I am actually trying to do or see.

I definitely recommend everyone use something- either a specific pop-up blocker application (for free ones see Free Pop-up and Messenger Spam Blocking Software )or some sort of firewall that includes pop-up blocking (like ZA Pro)

As for the execs at About.com- I'd be willing to bet they either never go look at the site or they have pop-up blockers installed as well. :-)
July 9th, 2003, 02:48 AM
jxrry59

coolkid.no-ip.com <<< this is a gag site and it is okay to look at it if u can close a window at the taskbar and have a popup blocker<<<<<another excellent reason to use a popup blocker<<<<this site may be THE MICROSOFT SECURITY RESPONSE SITE :D