On Wed Sep 17, 2003 at 01:52:09PM -0500, Avi Schwartz wrote:

> >Advisories go out in many forms; I can't help it if you don't pay 
> >attention
> >to one of the many:
> >
> >- [EMAIL PROTECTED]
> >- [EMAIL PROTECTED]
> >- full-disclosure ml
> >- RSS feed from MandrakeSecure
> >- MandrakeSecure website (on nearly every single page)
> >- MandrakeClub (latest advisory always on the front page)
> >
> >And no, announcements will not be going to this list or any other list 
> >other
> >than the announce list.
> >
> I appreciate the information and I just subscribed to the announce 
> list.  However, the same way I didn't know about the 
> [EMAIL PROTECTED] list I am sure there are many others that 
> are not aware of it.  If there is a bug that has a potential of 
> becoming a way to break into a computer I feel that all mailing list be 
> notified of it to minimize the potential damage.  Mandrake may have 
> many newbies (I hope you do, you need the business) which are new to 
> Linux and may need this extra help.  One nice touch SuSE has is a small 

I'm sorry, but I disagree.  I don't like the idea of spamming all of the
lists (and while it might not be considered spam, why do it when there is
one list that covers them all?).  It's a matter of education.  If someone
gets on the newbie or expert list, they've likely visited the website.
There is a link to the MandrakeSecure lists, clearly marked for
security-related lists, on the mandrakelinux.com page where you can
subscribe to the other lists.  How difficult is it to subscribe to these
other lists?  No, one other list?

Problem is people don't take security seriously, so they don't sign up for
the list.  There isn't much we can do to combat that... in the same way,
they may skip those messages we put on every single list and then what?

Also, FWIW, if you sign up for MandrakeOnline, you'll get alerts sent to
your inbox.

> icon in the KDE task bar which changes color when there are updates 
> available.  Click on it and you get a menu allowing you to check for 
> updates, show the last update log or start the update process.  very 
> nice, clean and can help users keep their system safe.

I agree, this would be nice and hopefully this is something that can be done
for 9.3 or 10.0.

-- 
MandrakeSoft Security; http://www.mandrakesecure.net/
Online Security Resource Book; http://linsec.ca/
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD}

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to