Steve Friedl's Security Advisories

Does this site look plain?

This site uses advanced css techniques

From time to time I have uncovered security vulnerabilities in a number of products or services, and I follow a generally full-disclosure policy. In every case I have made efforts to notify the responsible vendors ahead of time, and in most cases have coordinated the release of the vulnerability and the fix or patch at the same time. My advisories are released on Bugtraq at Security Focus.

Note: SecurityFocus moves their content around from time to time: kindly report broken links for repair.