Windows 10: MSRC Website Not Allowing Submissions

aldude999AP · Apr 16, 2019

Hello all,

I'm trying to report a security vulnerability through MSRC (Microsoft Security Response Center), but the report page at https://msrc.microsoft.com/create-report wont accept my bug.

After filling out all of the fields correctly, the error message it gives me is:

Sorry, there was an error with your submission.

Please try again.

I've tried calling the technical support line, but they didn't seem to understand what I was talking about.

Does anyone have any experience with this issue?

The page that seems to be generating the error message is https://msrc.microsoft.com/api/v1.0/VulnerabilityReports with a 500 Internal Server Error code.

Also there doesn't seem to be a Category for website bugs/Security Vulnerabilities anywhere on the answers site, so it's under the wrong Category.

:)

Brink · Apr 16, 2019

MSRC 2017 list of Top 100 security researchers

Security researchers play an essential role in Microsoft’s security strategy and are key to community-based defense. To show our appreciation for their hard work and partnership, each year at BlackHat North America, the Microsoft Security Response Center highlights contributions of these researchers through the list of “Top 100” security researchers reporting to Microsoft.

This list ranks security researchers reporting directly to Microsoft according to the quantity and quality of all reports for which we’ve issued fixes. While one criteria for the ranking is volume of reports a researcher has made, the severity and impact of the reports is very important to the ranking. Higher-impact issues carry more weight than lower-impact ones. While this list does not include security researchers who report to our partners ZDI and iDefense as we do not always have full information to recognize their efforts, we very much appreciate the partnership with ZDI and iDefense as they ensure that we know about any reports affecting Microsoft products.

Given the number of individuals reporting to Microsoft, anyone ranked among the Top 100 is among some of the top talent in the industry. Regardless of where security researchers are ranked in this list, we appreciate their active and ongoing participation with the Microsoft Security Response Center, and encourage new researchers to report potential vulnerabilities to us at L: secure@microsoft.com. We’re excited to see who’s going to be on the list next year.

MSRC team
Click to expand...

Source: The MSRC 2017 list of “Top 100” security researchers MSRC

Brink · Apr 16, 2019

Inside the MSRC - How we recognize our researchers

This is the first of a series of blog entries to give some insight into the Microsoft Security Response Center (MSRC) business and how we work with security researchers and vulnerability reports.

The Microsoft Security Response Center actively recognizes those security researchers who help us to protect our several billion customers and their endpoints in several ways. We split our acknowledgments into three distinct categories, CVE qualified submissions, online services, and bug bounty. It is possible that a single submission will be acknowledged by one or more of these categories. We update our acknowledgements each month with the latest findings and submissions.

When it comes to recognizing our researchers through Coordinated Vulnerability Disclosure (CVD), if the finding that was submitted was impactful enough to be addressed in our monthly bulletin release (more on that in our next blog) it will be assigned a CVE number that is credited to the researcher. The researcher and their associated CVE are acknowledged monthly here in the MSRC Security Update Guide.

Our Online Services Security Researcher Acknowledgements credit those researchers who are involved with making our online platforms safer by not only submitting their findings, but also working closely with us to fix vulnerabilities discovered during their research. We draw an immense body of knowledge and capability through direct engagement with security researchers who test and evaluate our online services spaces. Together with our Operational Security Assessment work, we are constantly improving our offerings and providing a secure experience to our customers globally.

Finally, the Microsoft Bug Bounty program offers a unique acknowledgment platform to reward security researchers with cash and other prizes for submitting their findings inside of our eligible bounty programs. Security researchers (aka “Bounty Hunters”) can potentially earn anywhere between five hundred dollars and two hundred fifty thousand dollars for each submission to the Microsoft Bug Bounty program. Currently we offer nine different bounty programs where there is an opportunity to earn money for submissions.

The security community is full of great research and insight, we all succeed when we come together on a common platform. We appreciate working with security researchers to better customer security and ensure our products and services continue to evolve with the threat landscape. Public acknowledgements are just one way we want to interact and support security research in the community. A big thank you to all the researchers that have and continue to engage directly with us.

Our next blog entry will look at what sort of reports go into our monthly security update cycle. Stay tuned.

Phillip Misner,
Principal Security Group Manager
Microsoft Security Response Center
Click to expand...

Source: Inside the MSRC – How we recognize our researchers MSRC

sthorpe2000 · Apr 16, 2019

Only allow certain websites option missing

This was NOT helpful. According to this link http://windows.microsoft.com/en-us/windows-10/set-child-limits you are supposed to enable a feature to only see websites on the allowed list. I've copied the section and highlighted it below.

To set up website restrictions

Select Websites, and switch Block inappropriate websites from
Off to On.

Now, adult content is blocked, InPrivate browsing is blocked, and BingSafeSearch is on.

If you want your child to only see websites that you've explicity allowed, check the box next to Only see websites on the allowed list.

This checkbox was there before, but now after upgrading to windows 10 it is MISSING.

Please re-enable that check box. ASAP!

Windows 10: MSRC Website Not Allowing Submissions

MSRC Website Not Allowing Submissions

MSRC Website Not Allowing Submissions

MSRC Website Not Allowing Submissions

MSRC Website Not Allowing Submissions - Similar Threads - MSRC Website Allowing

Filing an MSRC Report

Filing an MSRC Report

allow YouTube player but not website

Microsoft Family Allowed websites can't allow https

PROBLEM MSRC

Allowing innner pages of a website

Child Account Allowed websites

how to allow access to a website

Malware submission