Hi,

> I'm a very seldom poster but frequent reader of many of the

  So am I.

> securityfocus' lists. As such I have to tell you that I'm very concerned
> about your email regarding postings about products.
>
>
> > 1.  If you want to post about a product  positive or negative you
> > cannot do so from a Huhsmail or other such account.
>
> Please consider that there might be several good reasons to use such an
> account. The most important one is that you reveal valuable information
> about your company's network with some postings (e.g. "we have firewall
> xy, version a.b.c running and don't get it upgraded because...").

  Which is not exactly the topic of this list. I do see your point,
  yet I don't think that this is a problem in this list.
  Read rule number 1 again: If you want to post ABOUT A PRODUCT ...
  Using hushmail accounts are tempting for shooting against others
  (like competitors, see below) pretending an unbiased opinion where
  this is not the case.
  I think the rule is good.

> A second reason would be avoiding to get spammed on the company's
> account. Web archives are known to be resources for spammers, too. That
> is no criticism of you or your company, that is a fact that noone can
> avoid and we have to live with it.

  Spammers are not only harvesting web archives, they are on lists, too.
  :-(   Unfortunately it's unavoidable.

> > 2.  If you plan to post use your real name  or do not post.
>
> This is the same argument as above, regarding the first point of
> revealing information.

  I disagree entirely. In my opinion people should stand with their
  names for what they write. Anything else does not sound reliable
  to me.

  Cheers,


                                                    Chris Kronberg.

-- 
GeNUA mbH



---------------------------------------------------------------------------
The Lightning Console aggregates IDS events, correlates them with 
vulnerability info, reduces false positives with the click of a button, anddistributes 
this information to hundreds of users.

Visit Tenable Network Security at http://www.tenablesecurity.com to learn 
more.
----------------------------------------------------------------------------

Reply via email to