Re: China Experience ?

["Steven M. Christey" <coley () linus mitre org>]

Yaakov Yehudi <yehudi () tehila gov il> said

> We send off emails to China every day.  A few get answered from time
> to time.  This is consistent with complaints to other non English
> speaking countries.

To address the language problem in notifying admins from another
country about security incidents, it might help to have a public
"database" of notification emails in various languages and character
sets.  When you want to notify someone in another country about an
incident, you look up the country in the database, then dump in the
technical stuff like IP addresses, port numbers, and signatures, which
are more universal than any one language :) Obviously, this won't
address cases in which ISP's understand the notifications they receive
and do not act, but it may help.

As has been alluded to on this list, FIRST (the Forum of Incident
Response and Security Teams, http://www.first.org) is an international
organization of incident response teams.  Contacting a FIRST member
may also be an option.  See http://www.first.org/team-info/ for a list
of teams.

- Steve

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com