Live data from Hacker News

Bugtraq is back

lists.securityfocus.com

11–20 of 34 posts

Re: Bugtraq is back

#11
post #10

> Not to build a museum - to restart the conversation. > This list is [...]. Same address. Same purpose. New era. Please. I don't care you use AI to write your shit. But please at least put in the effort to have it write in your own voice.

I'm amazed that this pattern has been so ubiquitous for uh. Has it been years already? But they haven't tweaked the services yet to avoid these patterns.

Re: Bugtraq is back

#12
I might restart my old security blog then... anyway

I wonder what will happen. I think it might get flooded by automated AI submissions.

Re: Bugtraq is back

#13
post #10

> Not to build a museum - to restart the conversation. > This list is [...]. Same address. Same purpose. New era. Please. I don't care you use AI to write your shit. But please at least put in the effort to have it write in your own voice.

I'm amazed that this pattern has been so ubiquitous for uh. Has it been years already? But they haven't tweaked the services yet to avoid these patterns.

They could avoid these patterns but there will always be some patterns so they probably judged that these aren't too bad.

Re: Bugtraq is back

#14

First - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clea…

The announcement didn't read as AI-generated to me at all. Of course this is far from foolproof, but ZeroGPT says 0% AI.

Re: Bugtraq is back

#15

First - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clea…

oss-security gets relatively little use? You must know another oss-security. The one I'm subscribed to is very much alive and an important source of information for me.

Re: Bugtraq is back

#16
post #10

> Not to build a museum - to restart the conversation. > This list is [...]. Same address. Same purpose. New era. Please. I don't care you use AI to write your shit. But please at least put in the effort to have it write in your own voice.

Especially when writing about projects the author cares about. Surely it should warrant a human writing about the thing they built and are sharing with the world.

Re: Bugtraq is back

#17

First - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clea…

> clearly 100% AI-generated

First, show your working - just reads like generic announcement/PR speak from the last 30 years to me.

Secondly, could everyone who wants to make comments about AI text in submissions please consider re-reading the comments section of the Guidelines: https://news.ycombinator.com/newsguidelines.html - I'm not sure these comments are in the spirit of the HN community. We should stop this in the same way we try and stop "HN is just turning into Reddit" noise.

> Today, what's the incentive to use a mailing list?

Social media is trash that makes your life worse. Deleting the apps demonstrably improves mental health. I'm a case in point, but everyone I know or read about who gets rid of social media concurs. Major, major life upgrade.

I should not have to be on X to get notifications about new security issues. I should not have to sift through Meta's latest algorithm enhancements to find out if my servers are currently hanging their backsides out on the information superhighway.

Secondly, I don't want all security research to go via commercial channels, either via clearinghouses, orgs with "marketing teams" (I actually want to scream at the idea this is OK), or even through platforms like social media that exist to sell advertising.

Mailing lists are clean, simple, filterable, and readable - or ignorable - on any device of my choosing. I can route emails to ticketing systems without fear an API token is going to get revoked, an RSS feed is disabled by a "product owner", or a web scraper fails because somebody added a new react component for "improved usability". Email is email, and it's glorious, in a way no other communication mechanism has ever come close to matching because it's so simple.

Those two other security mailing lists suffer from not having critical mass. Bugtraq may or may not get critical mass back. I hope it does, not just for nostalgia reasons, but because we need a critical mass movement behind security research given the current threat landscape.

Re: Bugtraq is back

#18
post #10

> Not to build a museum - to restart the conversation. > This list is [...]. Same address. Same purpose. New era. Please. I don't care you use AI to write your shit. But please at least put in the effort to have it write in your own voice.

AI text just has such a noticeable rhythm... It makes it feel so non-genuine and I am so sick of it...

Re: Bugtraq is back

#19

First - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clea…

> clearly 100% AI-generated First, show your working - just reads like generic announcement/PR speak from the last 30 years to me. Secondly, could everyone who wants to make comments about AI text in submissions please consider re-reading the comments section of the Guidelines: https://news.ycombinator.com/newsguidelines.html - I'm not sure these comments are in the spirit of the HN community. We should stop this in…

> Secondly, could everyone who wants to make comments about AI text in submissions please consider re-reading the comments section of the Guidelines: https://news.ycombinator.com/newsguidelines.html - I'm not sure these comments are in the spirit of the HN community. We should stop this in the same way we try and stop "HN is just turning into Reddit" noise.

Thank you! I am so sick of these comments under EVERY POST.

Re: Bugtraq is back

#20

First - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clea…

> clearly 100% AI-generated First, show your working - just reads like generic announcement/PR speak from the last 30 years to me. Secondly, could everyone who wants to make comments about AI text in submissions please consider re-reading the comments section of the Guidelines: https://news.ycombinator.com/newsguidelines.html - I'm not sure these comments are in the spirit of the HN community. We should stop this in…

> Today, we bring it back.

> I have acquired securityfocus.com and the Bugtraq name. Not to build a museum - to restart the conversation. The mission is unchanged: full disclosure, researcher-first, no corporate filter.

This has the ai patter, the rhythm, the “not this, but that” trope, the list of threes, everything about it screams LLM to me

Post reply on HN