full-disclosure - Re: SecurityFocus to partially shut down

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <c9a09d01003180302t513cf730r2486cc6811607e63@mail.gmail.com>
Date: Thu, 18 Mar 2010 11:02:00 +0100
From: "Jan G.B." <ro0ot.w00t@...glemail.com>
To: "james o' hare" <jamesohare69@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: SecurityFocus to partially shut down

2010/3/18 james o' hare <jamesohare69@...glemail.com>:
> On Wed, Mar 17, 2010 at 10:09 PM, David Alanis <canito@...an.us> wrote:
>> So zero day exploits are being posted on Twitt?
>>
>> SDA
>
> Yes, that's why I said:
>
> On Mon, Mar 15, 2010 at 8:35 PM,
>> We need a proper unbiased unmoderated comprehensive
>> directory of security researcher accounts.
>
> Andrew
>

I don't think that you have the right approach.
When some kid posts a 0day on twitter, you can always send the
information to FD.

I second the request by David Alanis: Where are the tweets? Give us
some links to relevant tweets. (Tweets of security related stuff
*only* released on twitter.)

One more thought: As you know most of the projects have a bug tracker.
Information of these sources isn't mirrored anywhere. That's how it
always has been. Where's the difference now - why would we need a
directory of "whatever"?

Jan

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/