Hi Carlos, On 10/10/18 23:45, Carlos Friaças wrote: [...]
ps: i would say very few CSIRT people are on this list -- and i would like to be proven wrong. :-)
well, at least there are some, but yes, we may be just a few :-) but we often know who to talk to if needed. And, on a side-line, the industry and/or national CERTs in many country do have a pretty good knowledge of how to find and contact local players. which IMHO is another argument for *not* trying to find some contact info from abroad and afar and send requests along an "arbitrary" pattern, but rather to follow the established paths. And yes, some of those paths are not really well-established yet, and need some improvement. But I can't see a substantial difference when compared to other fields of complaints and/or investigations, either financial, fraud, criminal, traffic violations... Cheers, Wilfried
Regards, Carlos