Security Basics mailing list archives
RE: Security Search Engine
From: "Murda Mcloud" <murdamcloud () bigpond com>
Date: Thu, 26 Oct 2006 08:42:27 +1000
Hi Saqib, Couple of thoughts came up 1. excellent idea 2. When you say 'exclude vendor specific' I can see this includes open source sites/tools/communities? Eg snort/wireshark I guess they're not really vendors but are still 'competing?' 'co-opeting?'(if there is such a word). 3. Independent info isn't always 'good' info-I'm thinking along the lines of amazon's 'reviews' and also I remember a site by a guy named 'Black Viper' who had a comprehensive list of windows services that could be tuned according to 'some testing' he had done on his sytem. As far as I could tell lots of people took his advice at face value and not many people checked out his methods. I suppose the usual disclaimers apply. 4. Is it just coincidence that securityfocus comes up at the top so often;-) and are they a vendor-associated site(I know, they have plenty of disclosure about who they're owned by and I use the place every day and place a fair amount of trust in what I read there.) 5. also, 'news articles' can often be beat ups for products too(not sure if they're included-will check in a moment)-I'm trying to think of a specific example but it's too early in the morning. -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Kelly Martin Sent: Thursday, October 26, 2006 4:32 AM To: Saqib Ali Cc: security-basics Subject: Re: Security Search Engine Saqib, Looks like you're using the new Google custom search tool. I think it's a good idea and useful. One suggestion: maybe you could include a link that lists the sites you've included, so people can see what's being indexed and suggest others as well? I like the vendor-neutral approach. Someone's comment about certain vendors like Cisco having all their security documents on their website is a good point, but there may be a way to limit a search to just those areas (and not include marketing material). Although people looking for Cisco info will likely go directly to Cisco anyway, so it may not be needed. We use an open-source search engine on SecurityFocus. Google does a great job with search overall, but one thing I noticed is that they don't index mailing list content very well. For that reason we also have a drop-down box on our search to limit searches to a specific list or area, like SEC-BASICS or BUGTRAQ or all 34 mailing lists. It's not always the most intuitive but sometimes a fine-grained approach works really well when you're looking for something specific. Sometimes blogs have useful security info too, what are your thoughts on including some of those? Best regards, Kelly Saqib Ali wrote:
Hello All, I am building a Search Engine exclusively for the Security and eSecurity Community using Google's Coop program. I would like to NOT include any vendor site but just index sites that are vendor neutral. Would this is be a good strategy or not? The URL for the search engine is http://www.xml-dev.com Any suggestion, or new URLs are welcome. Note: I won't include any security vendor website in the index for right now.
--------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus --------------------------------------------------------------------------- --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- Security Search Engine Saqib Ali (Oct 24)
- Re: Security Search Engine Kelly Martin (Oct 25)
- RE: Security Search Engine Murda Mcloud (Oct 27)
- Re: Security Search Engine Matt Lye (Oct 27)
- Re: Security Search Engine Saqib Ali (Oct 27)
- Re: Security Search Engine Dathan Bennett (Oct 27)
- Re: Security Search Engine Saqib Ali (Oct 27)
- <Possible follow-ups>
- RE: Security Search Engine Erick Jensen (Oct 25)
- Re: Security Search Engine Saqib Ali (Oct 25)
- RE: Security Search Engine Laundrup, Jens (Oct 27)
- Re: Security Search Engine Kelly Martin (Oct 25)