I've found a XSS hole in digg, anyone know their security contact email address?

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Try this one, it's not a mail addy, but I've used it in the past.

http://digg.com/bugreport

xyberpix

@xyberpix

Cheers!

All web sites should have a security@domain policy with a page

Update...
Submitted to that contact form, I'll give them a few days to respond, if not I'll post the vector here.

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]



Edited 1 time(s). Last edit at 05/28/2008 01:08PM by Gareth Heyes.

Spam



Edited 1 time(s). Last edit at 11/13/2008 03:22AM by Gareth Heyes.