[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Finding Vendor Security Contacts
Mark Litchfield writes:
> Does any one have or know of a security contact within www.real.com, as I
> have a serious issue to report. Tried the website, only have technical
> support and the web forms don't allow for much content.
At one of the BOF forums at LISA 2002, a representative from CERT,
after describing their extensive network of vendor contacts, said
that anyone who has trouble finding a security contact in a company
is welcome to contact CERT. Though CERT will not give you anyone's
email address, they will ask the vendor's security person to contact
you directly if you request. [Note: I have no experience with CERT,
I'm just reporting what their rep said at the BOF]
Another tip is to find the press office / public affairs office on
the vendor's web site - the PR folks usually understand the potential
image problems of security vulnerabilities.