Hi everyone,

Got the first post (haha), but I do have a serious topic/question.

Apart from BugTraq, can people recommend decent mailing lists that track certain software, servers, hacks, exploits, etc.? (or just general security stuff).

Thanks.

AFAIK BugTraq is the predominant generic mailing list... but of course there are separate lists for every operating system and many software packages.

I think that as far as security *news* goes you can hear about stuff exactly where you'd expect to hear about them. OTOH, as far as questions ("how can I set up xyz securely?") it is forums like this one (hopefully?) which will have the most to offer.

Oh, and since admins aren't allowed to claim first post, FP.

securityfocus.com ?

Yes, I was going to suggest securityfocus.com as well.

There's a list of links on CERT:

http://www.cert.org/nav/other_sources.html