3 ms·
Bugtraq is back
- tptacek 2mo agoBugtraq had ceased being relevant at least a decade before it was shut down; it's kind of hard to see what place it could hold now. When it started, vulnerability research was a tiny niche, and disclosure was still a live debate; the norms today are totally different.
- DaRealGraybeard 2mo agoYet today, there's not many places to find open discussion and disclosures that otherwise would have seen the light of day in this age of "ethical hacking".
- stackghost 2mo agoThere's always Full Disclosure, I suppose. I would imagine that open discussion and disclosures have moved underground to closed groups.
- snorbleck 2mo agonow bring back the original packetstorm :)
- atlasdrift 2mo ago[dead]
- matherial 2mo agoFirst - and I know this is immaterial - there's something sad about the announcement being clearly 100% AI-generated and then bemoaning AI and calling for a renewed human connection. Like, we want to have a community, but no one is willing to do the work. Second, BUGTRAQ existed because it had no alternatives. There was no social media, vulnerability research orgs had no marketing teams, there were no commercial clearinghouses, etc. Today, what's the incentive to use a mailing list? Case in point: two other security mailing lists, fulldisclosure@seclists.org and oss-security@lists.openwall.com, still exist but get relatively little use.
- michaelmior 2mo agoThe announcement didn't read as AI-generated to me at all. Of course this is far from foolproof, but ZeroGPT says 0% AI.
- pajamasam 2mo agoIt contains four emdashes, it overuses the Rule of Three (https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing#Rule_of_three https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing#...), it has the typical "not X, but Y" sentence, it unduly emphasizes the significance of Buqtrack (https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing#Undue_emphasis_on_significance,_legacy,_and_broader_trends https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing#...) ("preservation for the ages", really?). Also, in my experience, LLMs seem to love to say something went "dark" or "silent", to mention a "generation" of people, and to say something "matters". "no corporate filter" also seems like a strange thing to say.
- IsTom 2mo agoI think it's just regular corporate speech. LLMs do this, because they've learned on this kind of posts.
- acdha 2mo agoEm-dashes were in common use long before LLMs existed — anyone saying that’s a sign of LLM use should not be listened to. They’re used by LLMs because they were trained on good writing and we shouldn’t avoid using them any more than we should stop using correct punctuation for the same reason.
- pajamasam 2mo ago> anyone saying that’s a sign of LLM use should not be listened to You don't need to believe me. You can read the studies about its statistically higher occurrence in LLM writing vs human writing (https://arxiv.org/pdf/2603.27006 https://arxiv.org/pdf/2603.27006) or you can do the analysis yourself. Also, no one said you should stop using them. But overusing them, along with emulating some of the other common traits of LLM generated writing, will give people the impression that you didn't bother to write something yourself.
- survivalcrziest 2mo agoIf this is something an LLM accomplished by itself, then we have reached the singularity.
- 0xbadcafebee 2mo ago"Make Hackers Great Again"
- jaapz 2mo ago> Not to build a museum - to restart the conversation. > This list is [...]. Same address. Same purpose. New era. Please. I don't care you use AI to write your shit. But please at least put in the effort to have it write in your own voice.
- Cthulhu_ 2mo agoI'm amazed that this pattern has been so ubiquitous for uh. Has it been years already? But they haven't tweaked the services yet to avoid these patterns.
- Miraltar 2mo agoThey could avoid these patterns but there will always be some patterns so they probably judged that these aren't too bad.
- gfat 2mo agoEspecially when writing about projects the author cares about. Surely it should warrant a human writing about the thing they built and are sharing with the world.
- phoronixrly 2mo agoAI text just has such a noticeable rhythm... It makes it feel so non-genuine and I am so sick of it...
- _pdp_ 2mo agoI might restart my old security blog then... anyway I wonder what will happen. I think it might get flooded by automated AI submissions.
- e12e 2mo agoInteresting. But the styles chosen for hyperkitty displaying the archives is quite awful. Probably want either fixed width font or sensible reflow.
- wiseleo 2mo agoSo... l0pht is next?