full-disclosure - BugTraq Speed

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200309241247.52685.jeremiah@nur.net>
From: jeremiah at nur.net (Jeremiah Cornelius)
Subject: BugTraq Speed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday 24 September 2003 11:39, Rainer Gerhards wrote:
> As probably many of you, I am subscribed to both BugTraq and this list.
> The past few (3?) weeks I think I notice a slow-down on BugTraq. Posts
> very often appear on BugTraq *hours* after they appear on this list.
>
> It can't be due to moderation, it happens during US prime time, when the
> moderator is awake ;) (bad thing if something important happens during
> US night time, though...). It also can't simply be the posters
> credibility - it happens to well known and respected posters, too (of
> course, all others have a much larger delay, sometimes days). For
> example the FreeBSD security advisory arrive around 3 hours later via
> BugTraq than via this list. A key point is that I *feel* (not know) it
> was much better until recently.
>
> I wonder if someone else is sharing this experience? If so, one would be
> tempted to suspect that Symantec is deliberately delaying delivery, e.g.
> to give its premium customers a head start. There have been a lot of
> rumors recently, and this would fit in nicely...
>
> Rainer
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

- From my own experience BugTraq, and ALL the SF lists have gone to running 
almost a day behind - give or take.

For comparison, the ICSA lists by TruSecure are running 4-6 hours latency.  I 
suppose that is an acceptable lag for a high-traffic, moderated group.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/cfTmJi2cv3XsiSARAiPJAKDRVyS+6Iq6kckLdaVC4Y6BlpzK4QCgp1Sm
NxCd89V9KFwmbx4iiZQ2+3A=
=u7qM
-----END PGP SIGNATURE-----