Some thoughts about delay in Bugtraq moderating

It appears that the reply from Mr. Paul Laudanski to phpBB 2.0.20 Full Path Disclosure and SQL Errors posting from cxib at securityreason com was in my Inbox early this morning.

My mail client says:

Sent: 10.5.2006 3:25:59

When checking the headers we have this exact information about the Bugtraq mailing list posting:

Date: Tue, 9 May 2006 20:25:59 -0400 (EDT)
From: Paul Laudanski zx at castlecops dot com

The exact Received time stamp is the following:

Received: from outgoing.securityfocus.com (outgoing.securityfocus.com [205.206.231.26]) by fe11.mail.saunalahti.fi (Postfix) .....; Sat, 13 May 2006 04:06:05 +0300 (EEST)

It is more than three days.

Date included to Bugtraq archive title field is the following:

May 08 2006 02:49AM

This case is at ‘Page 5 of 600′ at www.securityfocus.com/archive/1.

Do you have any comments?

Share
  • http://www.BeyondSecurity.com noam

    the question is whether they are delaying due to “load” or because they are providing someone with early warning, maybe even through their subscriber/insight program.

  • Wells

    I noticed a similar problem when I posted a few weeks ago. It was delayed for a similar amount of time.

  • http://networksecurity.typepad.com/ Juha-Matti

    From the reader’s side it’s ‘problem’. From the vendor’s side it’s ‘feature’.
    I don’t believe that it’s a resource problem.