From: Paul Schmehl (paulsutdallas.edu)
Date: Wed Feb 06 2008 - 10:44:10 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

--On Wednesday, February 06, 2008 11:58:31 +0100 Vincent van Scherpenseel
<mailinglistssyn-ack.org> wrote:
>
> So, what do you do when you want to report something like this? In fact
> I'm doing them a favor by reporting but all I got is this lousy
> response. I'll have to think twice about reporting something like this
> next time...
>
> Does anyone know an Yahoo! security contact that actually does his job?
>

You do this the old fashioned way.

# dig -t MX yahoo.com

; <<>> DiG 9.3.3 <<>> -t MX yahoo.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10018
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 7, ADDITIONAL: 14

;; QUESTION SECTION:
;yahoo.com. IN MX

;; ANSWER SECTION:
yahoo.com. 1058 IN MX 1 g.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 a.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 b.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 c.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 d.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 e.mx.mail.yahoo.com.
yahoo.com. 1058 IN MX 1 f.mx.mail.yahoo.com.

# telnet f.mx.mail.yahoo.com 25
Trying 209.191.88.247...
Connected to f.mx.mail.yahoo.com.
Escape character is '^]'.
220 mta378.mail.mud.yahoo.com ESMTP YSmtp service ready
EHLO hostname.utdallas.edu
250-mta378.mail.mud.yahoo.com
250-8BITMIME
250-SIZE 31981568
250 PIPELINING
MAIL FROM: testingutdallas.edu
501 Syntax error in parameters or arguments
MAIL FROM: <testingutdallas.edu>
250 sender <testingutdallas.edu> ok
RCPT TO: abuseyahoo.com
501 Syntax error in parameters or arguments
RCPT TO: <abuseyahoo.com>
250 recipient <abuseyahoo.com> ok
RCPT TO: <securityyahoo.com>
250 recipient <securityyahoo.com> ok
RCPT TO: <supportyahoo.com>
250 recipient <supportyahoo.com> ok
RCPT TO: <mail-abuseyahoo.com>
250 recipient <mail-abuseyahoo.com> ok
quit
221 mta378.mail.mud.yahoo.com
Connection closed by foreign host.

Pick your poison.

--
Paul Schmehl (paulsutdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]