Vendor Contacts

[aleph1 () DFW NET (Aleph One)]

After my little rant about informing vendors when you find a vulnerability
someone suggested that I post a list of contacts. A little late but here
it is.

Apache

security () apache org
http://www.apache.org/

BSDI

problems () bsdi com
http://www.BSDI.COM/support/patches/

Digital

rich.boren () cxo mts dec com

FreeBSD

security-officer () freebsd org
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/public_key.asc
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/

HP

security-alert () hp com
PGP key is avaiable via the public key servers, or by sending a message
with a subject to 'get key' to security-alert () hp com
http://us-support.external.hp.com/

IBM

security-alert () austin ibm com
http://www.ers.ibm.com/team-info/pgpkey.html
http://www.ers.ibm.com/tech-info/advisories/index.html


Microsoft

secure () microsoft com
http://www.microsoft.com/security/pgpkeys.txt
http://www.microsoft.com/security/

NetBSD

security-officer () netbsd org
ftp://ftp.betbsd.org/pub/NetBSD/misc/security/PGP/security-officer () netbsd org asc
ftp://ftp.betbsd.org/pub/NetBSD/misc/security/

OpenBSD

deraadt () openbsd org
http://www.openbsd.org/advisories/pgpkey
http://www.openbsd.org/advisories/

RedHat

bugs () redhat com
http://www.redhat.com/errata/

SCO

security-alert () sco com
http://www.sco.com/security/

SGI

security-alert () sgi com
PGP Key http://www.sgi.com/Support/security/agent99.html
http://www.sgi.com/Support/security/

Sun

security-alert () sun com
http://sunsolve.sun.com/sunsolve/secbulletins/SunSCkey.txt

CERT

cert () cert org
http://www.cert.org/CERT_PGP.key
http://www.cert.org/pub/alerts.html

Aleph One / aleph1 () dfw net
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01