[Web4lib] Speaking Of Phishing... Keeping Up With Securty Advisories?

[John Fereira]

At 06:43 AM 2/8/2007, Blake Carver wrote:
>Speaking Of Phishing...  The thread on phishing exploits reminds me
>how important security is.
>
>How does everyone keep up on the latest security happenings around the web?

I don't thinik everyone can, or *should* try to keep up with all of 
the security lists.  I was a unix systems administrator for 15 years 
and did keep up with them when that was part of my 
responsibility.   As a java programmer/systems analyst/technology 
strategist I have to be aware of general security implications for 
systems I develop/design but if I spent much time following all of 
the lists you suggest I wouldn't have time to do my *real* job.  We 
have a systems administrator whose responsibility it is to follow 
security happenings and he does a good job of keeping abreast of 
issues that could impact the systems that our programmer/analysts develop.


>I've found the best way for me is subscribing to all the common
>announcement lists for things like Drupal, Wordpress, Mediawiki, along
>with a few feeds in my feed reader: Latest Secunia Security
>Advisories, SecurityFocus Vulnerabilities, The SANS Internet Storm
>Center, FrSIRT - Vulnerabilities and Cyber Threats, The honeyblog.
>
>I'm always looking for other sources of security news, new exploits,
>trends and such, what am I missing?
>
>--------------
>Blake Carver
>LISHost.org
>Web Hosting For Librarians
>http://www.lishost.org
>_______________________________________________
>Web4lib mailing list
>Web4lib at webjunction.org
>http://lists.webjunction.org/web4lib/

John Fereira
jaf30 at cornell.edu
Ithaca, NY