> I'm a very seldom poster but frequent reader of many of the
So am I.
> securityfocus' lists. As such I have to tell you that I'm very concerned
> about your email regarding postings about products.
>
>
> > 1. If you want to post about a product positive or negative you
> > cannot do so from a Huhsmail or other such account.
>
> Please consider that there might be several good reasons to use such an
> account. The most important one is that you reveal valuable information
> about your company's network with some postings (e.g. "we have firewall
> xy, version a.b.c running and don't get it upgraded because...").
Which is not exactly the topic of this list. I do see your point,
yet I don't think that this is a problem in this list.
Read rule number 1 again: If you want to post ABOUT A PRODUCT ...
Using hushmail accounts are tempting for shooting against others
(like competitors, see below) pretending an unbiased opinion where
this is not the case.
I think the rule is good.
> A second reason would be avoiding to get spammed on the company's
> account. Web archives are known to be resources for spammers, too. That
> is no criticism of you or your company, that is a fact that noone can
> avoid and we have to live with it.
Spammers are not only harvesting web archives, they are on lists, too.
:-( Unfortunately it's unavoidable.
> > 2. If you plan to post use your real name or do not post.
>
> This is the same argument as above, regarding the first point of
> revealing information.
I disagree entirely. In my opinion people should stand with their
names for what they write. Anything else does not sound reliable
to me.
Cheers,
Chris Kronberg.
--
GeNUA mbH
------------------------------------------------------------------------
---
The Lightning Console aggregates IDS events, correlates them with
vulnerability info, reduces false positives with the click of a button, anddistributes this information to hundreds of users.
Visit Tenable Network Security at http://www.tenablesecurity.com to learn
more.
------------------------------------------------------------------------
----
Hi,
> I'm a very seldom poster but frequent reader of many of the
So am I.
> securityfocus' lists. As such I have to tell you that I'm very concerned
> about your email regarding postings about products.
>
>
> > 1. If you want to post about a product positive or negative you
> > cannot do so from a Huhsmail or other such account.
>
> Please consider that there might be several good reasons to use such an
> account. The most important one is that you reveal valuable information
> about your company's network with some postings (e.g. "we have firewall
> xy, version a.b.c running and don't get it upgraded because...").
Which is not exactly the topic of this list. I do see your point,
yet I don't think that this is a problem in this list.
Read rule number 1 again: If you want to post ABOUT A PRODUCT ...
Using hushmail accounts are tempting for shooting against others
(like competitors, see below) pretending an unbiased opinion where
this is not the case.
I think the rule is good.
> A second reason would be avoiding to get spammed on the company's
> account. Web archives are known to be resources for spammers, too. That
> is no criticism of you or your company, that is a fact that noone can
> avoid and we have to live with it.
Spammers are not only harvesting web archives, they are on lists, too.
:-( Unfortunately it's unavoidable.
> > 2. If you plan to post use your real name or do not post.
>
> This is the same argument as above, regarding the first point of
> revealing information.
I disagree entirely. In my opinion people should stand with their
names for what they write. Anything else does not sound reliable
to me.
Cheers,
Chris Kronberg.
--
GeNUA mbH
------------------------------------------------------------------------
---
The Lightning Console aggregates IDS events, correlates them with
vulnerability info, reduces false positives with the click of a button, anddistributes this information to hundreds of users.
Visit Tenable Network Security at http://www.tenablesecurity.com to learn
more.
------------------------------------------------------------------------
----
[ reply ]