Symantec Defends BugTraq
Rival claims notices delayed, censored.Symantec Corp. officials are defending their practices for handling postings to the BugTraq mailing list in the face of criticism from an upstart competitor. The way the list is run hasnt changed since Symantec acquired BugTraqs owner, SecurityFocus, last summer, executives say. "What I can tell you is that we never delay posting any message to BugTraq. And everyone gets access to the messages at the same time," said Art Wong, vice president of security response at Symantec, based in Cupertino, Calif., and the former CEO of SecurityFocus.
Wongs comments contradict charges made by executives at Secunia Ltd., a Danish security company that has started a new mailing list meant to replace BugTraq. The list will aggregate vulnerability advisories from several sources. Officials at the company said last week that theyre starting the list because of what they perceive as changes in the way BugTraq has handled notifications in recent months.