|
Keeping Up With Security
It seems ridiculous -- it´s just common sense -- but dozens of people e-mail OSAll every week asking how to keep up with the latest exploits and system patches. You´d think they´d be able to do it themselves! Well, in case you didn´t already know, here are some resources for you -- and a few words on how to use them.
For breaking news, advisories, and the latest patches you should definately subscribe to the Bugtraq mailing list. It´s hosted on Security Focus now and you can subscribe by e-mailing majordomo@securityfocus.com with the text "subscribe bugtraq"
For poorly organized but usefull advisories coming out after the fact, you should check out CERT, a service of Carnegie Mellon University. It can be found at http://www.cert.org
Comprehensive vulnerability databases, sometimes with patches, can be found at Security Focus until OSAll gets its´ database online. http://www.securityfocus.com
However much most people dislike Internet Security Systems, they do mantain a good exploit and patch database. Check out http://www.iss.net
For the latest news, including some information about vulnerabilities and the like, check out http://www.aviary-mag.com and http://www.hackernews.com |
