[Web4lib] Speaking Of Phishing... Keeping Up With SecurtyAdvisories?

[Thomas Edelblute]

I think this will vary based on responsibilities.  I have a SUN server
and receive weekly updates from SUN Microsystems on vulnerability fixes
and look for the patches that apply to my environment. 

Thomas Edelblute, Public Access Systems Coordinator
Anaheim Public Library

-----Original Message-----
From: web4lib-bounces at webjunction.org
[mailto:web4lib-bounces at webjunction.org] On Behalf Of John Fereira
Sent: Thursday, February 08, 2007 4:08 AM
To: Blake Carver; web4lib at webjunction.org
Subject: Re: [Web4lib] Speaking Of Phishing... Keeping Up With
SecurtyAdvisories?

At 06:43 AM 2/8/2007, Blake Carver wrote:
>Speaking Of Phishing...  The thread on phishing exploits reminds me how

>important security is.
>
>How does everyone keep up on the latest security happenings around the
web?

I don't thinik everyone can, or *should* try to keep up with all of the
security lists.  I was a unix systems administrator for 15 years and did
keep up with them when that was part of my 
responsibility.   As a java programmer/systems analyst/technology 
strategist I have to be aware of general security implications for
systems I develop/design but if I spent much time following all of the
lists you suggest I wouldn't have time to do my *real* job.  We have a
systems administrator whose responsibility it is to follow security
happenings and he does a good job of keeping abreast of issues that
could impact the systems that our programmer/analysts develop.


>I've found the best way for me is subscribing to all the common 
>announcement lists for things like Drupal, Wordpress, Mediawiki, along 
>with a few feeds in my feed reader: Latest Secunia Security Advisories,

>SecurityFocus Vulnerabilities, The SANS Internet Storm Center, FrSIRT -

>Vulnerabilities and Cyber Threats, The honeyblog.
>
>I'm always looking for other sources of security news, new exploits, 
>trends and such, what am I missing?
>
>--------------
>Blake Carver
>LISHost.org
>Web Hosting For Librarians
>http://www.lishost.org
>_______________________________________________
>Web4lib mailing list
>Web4lib at webjunction.org
>http://lists.webjunction.org/web4lib/

John Fereira
jaf30 at cornell.edu
Ithaca, NY 

_______________________________________________
Web4lib mailing list
Web4lib at webjunction.org
http://lists.webjunction.org/web4lib/

THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL OR ENTITY TO WHICH IT IS ADDRESSED AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, CONFIDENTIAL, AND EXEMPT FROM DISCLOSURE UNDER APPLICABLE LAWS. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, forwarding, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail or telephone, and delete the original message immediately. Thank you.