Bill Yonder wrote Hi All, So, I've been digging through the source code and I've found an issue relating to how DotNetNuke handles the encrpyion of fileticks and other related data.  I've been looking though the site and I can't seem to find where to post the data to report it. Where do I send it off to so I can make sure not to get publicly crucified for finding issues like the core team did to powerdnn? Bill

Greetings Bill ~

The page you are looking for is on the menu at News / Security Bulletins / Security Policy.  Here is a direct link for your convenience:

http://www.dotnetnuke.com/News/SecurityBulletins/SecurityPolicy/tabid/940/Default.aspx

For future reference, MOST companies employ a "security @..." email address (similar to abuse@, sales@, etc).  It is very common practice.

Kind Regards,
Scott

Bill

The issue you reported has been moved to the Private Gemini Log - so that the distribution of information is kept limited.  I was going to post a comment on the issue asking for you to send me any ideas/recommendations you might have to fix it - but I realised you wouldn't be able to see my comment.

Can you email me directly at charles dot nurse at dotnetnuke dot com - so we can begin a dialog on this.

Thanks