Real Cases

Real Cases Mailing List - Charter V1.0

Objective
This charter sets out the lists operating rules for both posting and moderating.
Information about subscribing, unsubscribing and the archives can be found at the end of this charter.

Background
This list is moderated by Topi Ylinen (topi.ylinen@hushmail.com), who is the CISO at a European localization service. This mailing list is intended for infosec professionals and others who need information on and/or want to discuss real infosec incidents. The difference to the existing Incidents mailing list (which is for technical issues) is that the Real Cases mailing list has a wider, more management-oriented perspective.

What is appropriate content?
The Real Cases mailing list is a forum for the discussion of infosec violations, incidents and court cases from the infosec management perspective. Here are some examples of what would constitute appropriate content:

Infosec crime: News headlines on real cases. How do infosec criminals and blackhats operate today?
Legislation and court cases: What are the applicable laws? When and how to report an incident to the authorities? How did things turn out in the court?
International issues: The differences in legislation and IT cultures. What if the perpetrator is operating from a different country?
Trends and statistics: What are the current trends in infosec crime? What kind of incidents cause the greatest corporate losses?

When discussing a case, it is acceptable to cover the technical aspects, but purely technical topics should be taken to other lists, such as the Incidents mailing list.

Whitepapers that deal with the relevant content may be posted. Papers that require a user to register before downloading or receiving the paper must NOT be posted and will be rejected.

Guidelines for Posting

All postings should be polite, non-personal and contain no defamatory or derogatory comments or foul language
All posting must be commercial / marketing free (discrete footnotes and email signatures are acceptable)
All postings must be in English
Everyone has an equal voice and all posts will be approved as long as they post within the bounds of this charter.
Only posts in text will be approved. No HTML!
Please keep in mind that the list will be universally accessible. When discussing a real crime case, it may be wise not to divulge any actual names, IP addresses or other uniquely identifying information.

Guidelines for Moderating
The moderator has sole and full discretion over what is appropriate content and what is not. We reserve the right to reject any message however in general all posts will be approved as long as they post within the bounds of this charter.

Conflict Resolution
From time to time people may feel that a post was either approved that shouldn't have been or a post was not approved that should have been. The appropriate way to deal with all moderation and list management issues is to:

1. Refer to this charter.
2. If you still feel a mistake has been made then you should mail the moderator (topi.ylinen@hushmail.com) offline, explain your concerns and discuss the issue.
3. If you still feel a mistake has been made you should send the offline email discussion thread with the moderator along with your reasons why you feel this is not appropriate to Dave Ahmad (da@securityfocus.com) and copy the moderator.

If you are ever unsure if you should post or feel there is a justified reason why you are posting outside of the charters scope, you can mail the moderator for advice prior to posting.

List Management

How do I subscribe?
Send an e-mail message to realcases-subscribe@securityfocus.com. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer.

How do I unsubscribe?
Send an e-mail message to realcases-unsubscribe@securityfocus.com from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer.

If your email address has changed email listadmin@securityfocus.com and ask to be manually removed.

How do I disable mail delivery temporarily?
Unsubscribe from the list and resubscribe to start receiving mailing list traffic again.

Is the list available in a digest format?
Yes.

How do I subscribe to the digest?
Send an e-mail message to realcases-digest-subscribe@securityfocus.com. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer.

How do I unsubscribe from the digest?
Send an e-mail message to realcases-digest-unsubscribe@securityfocus.com from the subscribed address. The contents of the subject or message body do not matter. You will receive a confirmation request message to which you will have to answer.

I seem to not be able to unsubscribe. What is going on?
You are probably subscribed from a different address than that from which you are sending commands to the list from. Either send an email from the appropriate address or email listadmin@securityfocus.com to be unsubscribed manually.

Can you add a tag like "[realcases]" to the subject line of each message? Not at this time. How can I tell whether I am subscribed to the list?
Send an e-mail message to realcases-query@securityfocus.com. If you want to test whether you are subscribed to the digest send an e-mail message to realcases-digest-query@securityfocus.com.