[H-GEN] security

[Craig Eldershaw]

>By `local contact address' do you mean their ISP, or AUSCERT, or
>somebody else?

Depends upon who the ISP is.  Something large and reliable (eg. a
university) will almost certainly have a central person responsible for
this (eg. here, I send such things to oxcert at ox.ac.uk which is a small
team that coordinates closely with UK-wide CERT organisations).
Presumably Rob or Mark could enlighten the list as to UQ's preferences
and contact addresses for their clients.

If you have a smaller ISP, then probably let them know (email to the
support desk, or the chief admin or something), but they may or may not
be organised/knowledgable enough to pass it on/do anything themselves.
So direct to AusCERT might be appropriate in those instances.

C.