[asterisk-dev] fastAGI vs CURL

[Matt Fredrickson]

Hey

On Tue, Mar 26, 2019 at 4:44 PM naruto360 <abdelhady20190 at gmail.com> wrote:
>
> Would you like me to talk to them and explain the problem to them

Yes.  That's exactly what we're suggesting.

>
> What I will get after you report the problem to them

Don't know what you're looking for, but you'll have to talk to them about that.

I think this is a separate discussion to be had offline though.
Please continue this discussion using the security at asterisk.org email.
The original subject of this email thread has nothing to do with this
security related discussion.

Matthew Fredrickson

>
> Knowing that I have explained the problem to your security team
>
>
>
>
>
>
>
> في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٩:٣١ م Matt Fredrickson <creslin at digium.com> كتب:
>>
>> Hey Naruto,
>>
>> Sounds like we're having some communications misunderstandings.  I
>> sent you a reply to your email that you sent to security at asterisk.org
>> about this.  Let's handle this there.
>>
>> Matthew Fredrickson
>>
>> On Tue, Mar 26, 2019 at 1:56 PM naruto360 <abdelhady20190 at gmail.com> wrote:
>> >
>> > But what you say is not true this site you are talking about
>> >
>> > This is their login page
>> >
>> > https://id.atlassian.com/login?continue=https%3A%2F%2Fwww.atlassian.com%2F&_ga=2.134231857.1912058625.1553625136-260578399.1553625136
>> >
>> >
>> > But the problem is here
>> >
>> > url: https://wiki.asterisk.org/wiki/dologin.action
>> >
>> > On your site
>> >
>> >
>> > في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٨:١٨ م Malcolm Davenport <malcolmd at sangoma.com> كتب:
>> >>
>> >> Howdy,
>> >>
>> >> You are attempting to report issues against a product (Confluence) that is built by Atlassian (www.atlassian.com).  The correct avenue, per some Googling, for reporting an issue (security) against an Atlassian product is www.atlassian.com/security
>> >>
>> >> We are not the correct avenue for reporting a security issue against an Atlassian product.
>> >>
>> >> Cheers
>> >>
>> >> On Tue, Mar 26, 2019 at 12:51 PM naruto360 <abdelhady20190 at gmail.com> wrote:
>> >>>
>> >>> Hi sorry for the inconvenience but the security team says
>> >>>
>> >>>
>> >>> Hey,
>> >>>
>> >>> Unfortunately, we didn't write the platform that runs the site.  You
>> >>> probably should send your email to the people at Atlassian that create
>> >>> the confluence product (which is what we use).
>> >>> Matthew Fredrickson
>> >>>
>> >>>
>> >>> What do you mean? Do you have another security team?
>> >>>
>> >>> في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٤:٥١ م naruto360 <abdelhady20190 at gmail.com> كتب:
>> >>>>
>> >>>> Thank you. I am waiting to reply
>> >>>>
>> >>>> في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٤:٥٠ م Joshua C. Colp <jcolp at digium.com> كتب:
>> >>>>>
>> >>>>> On Tue, Mar 26, 2019, at 11:47 AM, naruto360 wrote:
>> >>>>> > Hello. You sent the poc who is the security team and no one answered.
>> >>>>> > Is this possible?
>> >>>>>
>> >>>>> The emails were received, they will be looked into and responded to as soon as possible.
>> >>>>>
>> >>>>> --
>> >>>>> Joshua C. Colp
>> >>>>> Digium - A Sangoma Company | Senior Software Developer
>> >>>>> 445 Jan Davis Drive NW - Huntsville, AL 35806 - US
>> >>>>> Check us out at: www.digium.com & www.asterisk.org
>> >>>>>
>> >>>>> --
>> >>>>> _____________________________________________________________________
>> >>>>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> >>>>>
>> >>>>> asterisk-dev mailing list
>> >>>>> To UNSUBSCRIBE or update options visit:
>> >>>>>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>> >>>
>> >>> --
>> >>> _____________________________________________________________________
>> >>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> >>>
>> >>> asterisk-dev mailing list
>> >>> To UNSUBSCRIBE or update options visit:
>> >>>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>> >>
>> >>
>> >>
>> >> --
>> >> --------------------------------------------------
>> >> Malcolm Davenport
>> >> Digium - a Sangoma company | Senior Product Manager
>> >> 445 Jan Davis Drive NW - Huntsville, AL 35806 - US
>> >> Tel/Fax: +1 256 428 6252
>> >> malcolmd at sangoma.com
>> >> --
>> >> _____________________________________________________________________
>> >> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> >>
>> >> asterisk-dev mailing list
>> >> To UNSUBSCRIBE or update options visit:
>> >>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>> >
>> > --
>> > _____________________________________________________________________
>> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>> >
>> > asterisk-dev mailing list
>> > To UNSUBSCRIBE or update options visit:
>> >    http://lists.digium.com/mailman/listinfo/asterisk-dev
>>
>>
>>
>> --
>> Matthew Fredrickson
>> Digium - A Sangoma Company | Asterisk Project Lead
>> 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
>>
>> --
>> _____________________________________________________________________
>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>>
>> asterisk-dev mailing list
>> To UNSUBSCRIBE or update options visit:
>>    http://lists.digium.com/mailman/listinfo/asterisk-dev
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev



-- 
Matthew Fredrickson
Digium - A Sangoma Company | Asterisk Project Lead
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA