Re: Disclosure

["Adriel T. Desautels" <ad_lists () netragard com>]

Notify CERT and the company at the same time anonymously.


On Feb 11, 2009, at 2:58 PM, Saphex wrote:

> Hi,
>
> I have been wondering, how to disclosure vulnerabilities. If some
> corporate web site has a vulnerability, witch is the best approach to
> reveal that vulnerability to them? Without getting a lawsuit or
> something?
> Is there some law compliant way of doing it? Lets assume they didn't  
> ask
> for the security *testing*.
>
> Best regards,
> saphex



        Adriel T. Desautels
        ad_lists () netragard com
        --------------------------------------

        Subscribe to our blog
        http://snosoft.blogspot.com