Symantec Corp. officials are defending their practices for handling postings to the BugTraq mailing list in the face of criticism from an upstart competitor. The way the list is run and when messages are posted hasn’t changed at all since Symantec acquired BugTraq’s owner, SecurityFocus, last summer, executives say. “What I can tell you is that we never delay posting any message to BugTraq. And everyone gets access to the messages at the same time,” said Art Wong, vice president of security response at Symantec, based in Cupertino, Calif., and the former CEO of SecurityFocus. Wong’s comments contradict charges made by executives at Secunia Ltd., a Danish security company that has started a new mailing list meant to replace BugTraq. The list will aggregate vulnerability advisories from several sources. Officials at the company said last week that they’re starting the list because of what they perceive as changes in BugTraq in recent months. Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.