Re: Suggested lists, advisory notices, CERTS

[Steve Schuster <sjs74 () CORNELL EDU>]

I monitor this one of course.  By the way, let me mention that I've found
some very useful information from this forum.  Thanks to everyone.

In addition, I monitor

        vuln-dev -- most of the time this is pretty quiet but there is
some very good technical info here.
        bugtraq -- By far the noisiest of the lists but I've decided it's
worth my time to weed through the chalf.  This is were I first learned of
the MS RPC/DCOM vulnerability and I found the scanner that looked
specificly for this vulnerability.
        CERT - Good to be on but information is usually later than some of
the other lists.
        Firewall Wizards - Can't say that I'm running a firewall currently
but sometime some good technical discussions and helpful information.
        Incidents - Some initial warnings here but also a good place to
find reasonable responses to events.

        I also like some of the UseNet groups but don't always have time
to monitor and play within this realm as much as I used to.  Alt.2600 is a
very popular one.

        While these lists can often make mail processing rather difficult,
I feel that it is my job to be as informed as possible and I really know no
better way to accomplish this.  In addition to these lists I think that
others in my group probably have additionaly list they monitor.

Hope this helps,
sjs



At 09:26 AM 8/22/2003, you wrote:
> Can someone send me a list what advisories, lists, auto-generated messages
> and web sites that most security personnel monitor on a daily basis?
> thanks,
> Thomas R. Neiss
> Interim Director of Telecommunications and Information Security
> University at Albany
> State University of New York
> 1400 Washington Avenue MSC 209
> Albany, NY 12222
> tneiss () uamail albany edu
> (518) 437-3800
> (518) 437-3810 (FAX)
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/cg/.

---------------------------------------------------------------------------------------------------------------------
Steve Schuster
IT Security Office
Cornell University
Work -- (607)255-8825   Cell -- (607)351-1386
---------------------------------------------------------------------------------------------------------------------

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.