Sbonine: Created page with "
 From: Big-8 Management Board  Subject: RESULT: comp.security.announce will be removed Date: Tue, 8 Feb 2011 04:58:04 EST Message-ID: 
2011-02-08T13:30:27Z
Created page with "<pre> From: Big-8 Management Board <board@big-8.org> Subject: RESULT: comp.security.announce will be removed Date: Tue, 8 Feb 2011 04:58:04 EST Message-ID: <iir3tr$d49$1@four.alb..."
New page
<pre>

From: Big-8 Management Board <board@big-8.org>

Subject: RESULT: comp.security.announce will be removed

Date: Tue, 8 Feb 2011 04:58:04 EST

Message-ID: <iir3tr$d49$1@four.albasani.net>



                             RESULT

              comp.security.announce will be removed



The Last Call for Comments (LCC) on 2011-02-01 initiated a five-day

period for final comments.  Following this comment period, the Big-8

Management Board has decided by consensus to remove moderated group

comp.security.announce.



RATIONALE:



According to Google's archive there has been only one message posted to

this group (on 28 July 2009) in the past three years.



This group has no charter or archived FAQ.  The latest "List of Big

Eight Newsgroups" (15 December 2010) states that this group is for

"Announcements from the CERT about security."  The latest two such

announcements were on 28 July 2009 and 29 December 2005.  There have

been numerous alerts about security vulnerabilities in 2010 posted on

the US-CERT Web site (see below), none of which have been posted to

comp.security.announce.



A newsgroup message sent to comp.security.announce on 24 November 2010

did not appear posted on that group.  A bounce was not possible because

the From address was munged.  Another message was sent on 28 November

2010 with a valid From address.  That message too did not appear posted

on the group.



CERT is an organization within Carnegie Mellon University.  E-mail to

<cert@cert.org> -- the contact address indicated on the CERT Web site --

asking if comp.security.announce is still being used resulted in a reply

from a Jeff Smith with a cert.org E-mail address.  Smith's reply was:

"David, we no longer post to newsgroups. Please check the US-CERT

website for alternative ways of being alerted."



US-CERT is an organization within the U.S. Department of Homeland

Security.  E-mail to <info@us-cert.gov>, <soc@us-cert.gov>, and

<us-cert@us-cert.gov> -- addresses all indicated on the US-CERT Web site

-- asking if comp.security.announce is still being used have resulted in

no replies.  The last such message was sent 28 October 2010.



An E-mail message was sent to comp-security-announce@moderators.isc.org

on 5 December 2010.  Neither a bounce nor a reply were received.



No replies to the 1st or 2nd RFD were posted to news.groups.proposals.



NEWSGROUPS LINE:



comp.security.announce  Announcements from the CERT about security.

(Moderated)



DISTRIBUTION:



news.announce.newgroups

news.groups.proposals

comp.security.announce

comp.security.misc



Folowup-To: news.groups.proposals



CHARTER OF COMP.SECURITY.ANNOUNCE



There is no charter archived at

<ftp://ftp.isc.org/pub/usenet/news.announce.newgroups/comp/> for

comp.security.announce.



HISTORY OF THE GROUP:



The earliest message posted to comp.security.announce found in Google's

archive is dated 6 May 2000.  For a number of years, messages about

computer security vulnerabilities were posted when such vulnerabilities

were discovered.  Later, such messages were posted only after the

vendors of the affected software or hardware released fixes.  US-CERT

now issues its messages via E-mail, RSS, and similar services to

subscribers.  Carnegie Mellon's CERT maintains a database, but I cannot

locate a subscription service.



PROPONENT:



David E. Ross <david@rossde.com>



CHANGE HISTORY:



2010-10-26      E-mail messages sent to CERT and US-CERT

2010-10-27      Reply received from CERT (group no longer used)

2010-10-28      Additional E-mail messages sent to US-CERT

2010-11-24      Newsgroup message sent to comp.security.announce (munged reply address)

2010-11-28      Newsgroup message sent to comp.security.announce (valid reply address)

2010-12-05      E-mail message sent to comp-security-announce@moderators.isc.org

2011-01-02      1st RFD

2011-01-17      2nd RFD

2011-02-01      LCC

2011-02-08      RESULT

</pre>
Nan:2011-02-08-result-comp.security.announce - Revision history
