Bugtraq Is Back

First - and I know this is immaterial - the fact that the announcement is AI-generated somehow makes me sad. Especially since it bemoans the negative impacts of AI and calls for a renewed human connection. We like the ideal, but no one is willing to do the work of typing text themselves.

Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clearinghouses, etc. Today, there's really no incentive to use a mailing list. Case in point: two other security mailing lists, full-disclosure@ and oss-security@, still exist but are getting less and less attention with every passing year.

Bugtraq had ceased being relevant at least a decade before it was shut down; it's kind of hard to see what place it could hold now. When it started, vulnerability research was a tiny niche, and disclosure was still a live debate; the norms today are totally different.

now bring back the original packetstorm :)