Hacker News new | ask | show | jobs
by Bjoern 4468 days ago
Wow, this is sad. Hope we can get more info on what was going on.

Besides Bugtraq what mailing lists security wise do you follow?

EDIT: Or what other general means by Twitter, Websites, Databases, Blogs etc. do you recommend?

3 comments

Why would you follow any mailing lists for security in 2014? The concept of a security mailing list predates Twitter, vulnerability databases, Reddit, and blogs. But we have all those things now, and they are all better than Full-Disclosure on its best days.
Yeah people keep telling me mail is dead, but its still kicking around and is very well alive. Let me edit my initial question to be email neutral though.
Why are they better?
Secunia has a free Secunia Weekly Advisory Summary newsletter. You need to register for an account at https://secunia.com/community/profile/ and tick a box for a weekly summary IIRC.

But it's probably easier and more convenient to subscribe for announce mailiing lists for software you're using. Unless you can turn off affected services or scramble and patch before maintainers.

No substitute for email, but VuXML is an interesting, machine-readable, and therefore potentially extremely useful way of distributing security advisories:

http://www.vuxml.org/freebsd/