Security-Related Mailing Lists

Modified 21 June 2008

Get on some mailing lists — advisory bulletins, etc.

• Advisories
  • CERT advisories: http://www.cert.org — Very high level, and they don't (usually) appear until a fix is known. CERT advisories are nice reminders, but they should not be the way you first hear about a problem!
  • Bugtraq: send mail to bugtraq-digest-subscribe@securityfocus.com. All the details you ever wanted (and many you don't).
  • Full Disclosure: http://lists.netsys.com/mailman/listinfo/full-disclosure Even higher bandwidth and more details.
• Crypto-Gram: http://www.counterpane.com/. Great overview of security philosophy, plus some details, and fantastic guidance on detecting snake oil.
• Help Net Security (HNS) — http://net-security.org/ . Nice weekly newsletter summarizing all the other lists. News, vulnerabilities, advisories.
• InfoSec News — includes the Secunia Weekly Advisory Summary and lots of infosec news.
  http://www.infosecnews.org/mailman/listinfo/isn and RSS feed at http://www.infosecnews.org/isn.rss
• Dartmouth's Institute for Security Technology Studies list — http://news.ists.dartmouth.edu/todaysnews.html
• CIAC advisories: send mail to listserv@netspace.org
• RISKS-Forum Digest: All matters risky related to technology: http://catless.ncl.ac.uk/Risks/
• Best of Security requests for "bos" to: send mail to majordomo@suburbia.net. This is a flood of mail and it isn't available in digest form. You may just want to periodically scan the archives at: http://www.geek-girl.com/bugtraq/.
• Electronic CIPHER: send mail to cipher-request@itd.nrl.navy.mil, or check http://www.itd.nrl.navy.mil/ITD/5540/ieee/cipher/.
• Eight Little Green Men: send mail to majordomo@8lgm.org
• Firewalls Mailing List: http://lists.gnac.net/firewalls/ or ask for "firewall-digest" when you send mail to majordomo@greatcircle.com or ask for "firewall-wizards" when you send mail to majordomo@nfr.net
• INFSEC-L Information Systems Security List: send mail to listserv@etsuadmin.etsu.edu
• Intrusion Detection Systems send mail to majordomo@uow.edu.au
• Legal Aspects of Computer Crime send mail to majordomo@suburbia.net
• Linux Security Issues send mail to linux-security-request@redhat.com
• NT Security Issues, ask for "ntsecurity" when you send mail to majordomo@iss.net
• The RISKS Forum send mail to risks-request@csl.sri.com
• WWW Security send mail to www-security-request@nsmx.rutgers.edu
• Secure HTTP send mail to shttp-talk-request@openmarket.com
• Secure Sockets Layer (SSL) send mail to ssl-talk-request@netscape.com
• You might find the C4I mailing list of interest, if you don't mind esoteric discussions of satellite link hardware and endless self-promotion by certain self-proclaimed "infowar experts". Send a message (with no subject!) to C4I-PRO-REQUEST@stl.nps.navy.mil with a single line message along the lines of:
  subscribe C4I-PRO mylogin@mycompany.com
• Also see http://star.niimm.spb.su:80/~maillist/index.html for details on several security mailing lists.

Security Page

© Bob Cromwell Jul 2008. Created with /bin/vi, hosted on OpenBSD with Apache.    Root password available here