Who to report security issues to?

[yzpilot]

I posted this in the Security forum and got almost zero activity. I won't post details here because I don't want to cross-post, but I have a stock Elastix 2.0 install that was hacked. No HTTP or HTTPS or SSH access from outside. No SSH login (PEM key required). Good password. Good corporate firewall, etc.

Does anyone know who would be interested in this? I feel like I should be sharing my experiences with folks so we can prevent this from happening to others, but based on the activity in the security forum, no one seems to care.

I'm probably just posting in the wrong place.

 

[danardf]

I posted this in the Security forum and got almost zero activity.

Maybe just making comment on your post. Because, today, i've no reply from you.
I don't know if you have interested o what you think about that

http://elastix.org/index.php/en/compone ... html#89853

but based on the activity in the security forum, no one seems to care.

It's wrong.
Some guys works hard for that.

From my side, i'm not an expert's security. I can only share my experience.
Next, maybe Bob could help you about that. But... I don't know if he's there today or this week.

 

[superiorit]

I have also commented on your thread.