yeah, and then who cares...

--- On Wed, 26/11/08, Tarun Dua <[EMAIL PROTECTED]> wrote:
From: Tarun Dua <[EMAIL PROTECTED]>
Subject: Re: [Owasp-delhi] XSS in IRCTC.
To: "Karthik Muthukrishnan" <[EMAIL PROTECTED]>
Cc: [email protected]
Date: Wednesday, 26 November, 2008, 6:37 AM

> What do other guys in the mailing list say? Report it right away or confirm
> the issue and report it?
The security circus demands that you investigate the issue and only
then report it.

Plash,
A hunch hardly qualifies as a full-disclosure.

Cheers!!
-Tarun
_______________________________________________
Owasp-delhi mailing list
[email protected]
https://lists.owasp.org/mailman/listinfo/owasp-delhi



      
_______________________________________________
Owasp-delhi mailing list
[email protected]
https://lists.owasp.org/mailman/listinfo/owasp-delhi

Reply via email to