Recommended Mailing Lists - Sites

IMO, the following mailing lists could provide some useful advice and 
illustrate parts we are missing on this project.

from securityfocus.com:

security-basics (GREAT, a must-be-subscribed)
bugtraq (needs no introduction)
pen-test (penetration testing discussion)
focus-linux (low-traffic, but some good subjects arise from time to time)
vuln-dev (code auditing)

Visit www.securityfocus.com for subscribing

Also may I recommend:

netfilter-users from netfilter.org

Evolves around using and developing the packet filtering infrastracture in the 
kernel, materialised either as modules or the powerful iptables program.

For those not already subscribed, lfs-dev does provide some insight in the 
development of the LFS project. 

I am also subscribed at nmap-dev and nmap-hackers, where apart from developing 
the nmap program, general discussions on port scanning occasionally take 
place. More info at www.insecure.org. There you will also find a list with 
the most popular mailing-lists on the net.

The sites worth monitoring IMHO are

www.securityfocus.com (also provides 2 RSS feeds)
www.cert.org
www.symantec.com
www.slashdot.org
www.newsforge.com

I check these out two or three times a day for the last 4 months and haven't 
missed a single important vulnerability or security alert. Even the latest 
virii and worm threats are covered (symantec's site takes care of that)

Additions to this list are more than welcome.

-- 
himicos
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page