[asterisk-dev] fastAGI vs CURL

[naruto360]

Would you like me to talk to them and explain the problem to them

What I will get after you report the problem to them

Knowing that I have explained the problem to your security team







في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٩:٣١ م Matt Fredrickson <creslin at digium.com> كتب:

> Hey Naruto,
>
> Sounds like we're having some communications misunderstandings.  I
> sent you a reply to your email that you sent to security at asterisk.org
> about this.  Let's handle this there.
>
> Matthew Fredrickson
>
> On Tue, Mar 26, 2019 at 1:56 PM naruto360 <abdelhady20190 at gmail.com>
> wrote:
> >
> > But what you say is not true this site you are talking about
> >
> > This is their login page
> >
> >
> https://id.atlassian.com/login?continue=https%3A%2F%2Fwww.atlassian.com%2F&_ga=2.134231857.1912058625.1553625136-260578399.1553625136
> >
> >
> > But the problem is here
> >
> > url: https://wiki.asterisk.org/wiki/dologin.action
> >
> > On your site
> >
> >
> > في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٨:١٨ م Malcolm Davenport <
> malcolmd at sangoma.com> كتب:
> >>
> >> Howdy,
> >>
> >> You are attempting to report issues against a product (Confluence) that
> is built by Atlassian (www.atlassian.com).  The correct avenue, per some
> Googling, for reporting an issue (security) against an Atlassian product is
> www.atlassian.com/security
> >>
> >> We are not the correct avenue for reporting a security issue against an
> Atlassian product.
> >>
> >> Cheers
> >>
> >> On Tue, Mar 26, 2019 at 12:51 PM naruto360 <abdelhady20190 at gmail.com>
> wrote:
> >>>
> >>> Hi sorry for the inconvenience but the security team says
> >>>
> >>>
> >>> Hey,
> >>>
> >>> Unfortunately, we didn't write the platform that runs the site.  You
> >>> probably should send your email to the people at Atlassian that create
> >>> the confluence product (which is what we use).
> >>> Matthew Fredrickson
> >>>
> >>>
> >>> What do you mean? Do you have another security team?
> >>>
> >>> في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٤:٥١ م naruto360 <abdelhady20190 at gmail.com>
> كتب:
> >>>>
> >>>> Thank you. I am waiting to reply
> >>>>
> >>>> في الثلاثاء، ٢٦ مارس، ٢٠١٩ ٤:٥٠ م Joshua C. Colp <jcolp at digium.com>
> كتب:
> >>>>>
> >>>>> On Tue, Mar 26, 2019, at 11:47 AM, naruto360 wrote:
> >>>>> > Hello. You sent the poc who is the security team and no one
> answered.
> >>>>> > Is this possible?
> >>>>>
> >>>>> The emails were received, they will be looked into and responded to
> as soon as possible.
> >>>>>
> >>>>> --
> >>>>> Joshua C. Colp
> >>>>> Digium - A Sangoma Company | Senior Software Developer
> >>>>> 445 Jan Davis Drive NW - Huntsville, AL 35806 - US
> >>>>> Check us out at: www.digium.com & www.asterisk.org
> >>>>>
> >>>>> --
> >>>>> _____________________________________________________________________
> >>>>> -- Bandwidth and Colocation Provided by http://www.api-digital.com
> --
> >>>>>
> >>>>> asterisk-dev mailing list
> >>>>> To UNSUBSCRIBE or update options visit:
> >>>>>    http://lists.digium.com/mailman/listinfo/asterisk-dev
> >>>
> >>> --
> >>> _____________________________________________________________________
> >>> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> >>>
> >>> asterisk-dev mailing list
> >>> To UNSUBSCRIBE or update options visit:
> >>>    http://lists.digium.com/mailman/listinfo/asterisk-dev
> >>
> >>
> >>
> >> --
> >> --------------------------------------------------
> >> Malcolm Davenport
> >> Digium - a Sangoma company | Senior Product Manager
> >> 445 Jan Davis Drive NW - Huntsville, AL 35806 - US
> >> Tel/Fax: +1 256 428 6252
> >> malcolmd at sangoma.com
> >> --
> >> _____________________________________________________________________
> >> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> >>
> >> asterisk-dev mailing list
> >> To UNSUBSCRIBE or update options visit:
> >>    http://lists.digium.com/mailman/listinfo/asterisk-dev
> >
> > --
> > _____________________________________________________________________
> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> >
> > asterisk-dev mailing list
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-dev
>
>
>
> --
> Matthew Fredrickson
> Digium - A Sangoma Company | Asterisk Project Lead
> 445 Jan Davis Drive NW - Huntsville, AL 35806 - USA
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-dev mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20190326/68dd94f8/attachment.html>