I check the Secunia advisories daily as part of my day job and I've sensed a "great disturbance in the force" that is Secunia.
Not surprisingly, Secunia has become very popular amongst security professionals for its advisories. With an advisory database such as theirs, it was a natural progression for them to create the Personal Software Inspector (PSI) that checks if your software versions have known vulnerabilities in them or whether they've reached end of life. The next most natural step was to create a networked version of the same and start targetting the product at corporations. Yes, it's useful, but I'd say you really need something like Patch Link instead to not only detect outdated versions but to patch them as well. I've even suggested this to Secunia in the past.
All this growth of their offering and interested parties, whilst reasonable and obvious, is beginning to detract from what I really want from their web site - the advisories. They have had two mechanisms for receiving the advisories: mailing list and RSS feed. The latter no longer works (http://secunia.com/information_partner/anonymous/o.rss 404 page not found) and the mailing list is hopelessly delayed and sometimes entries are missing (based on past experience, hence me using their RSS feeds in addition to the mailing lists).
I see their web site has now completely changed and very clearly positions itself as a web site that sells its services and products. No alternative RSS feed links to be had either. Yes, the advisories are still shown on their web site but that means I now would have to visit it instead of using my RSS reader.
Niels Henrik Rasmussen, CEO and founder of Secunia.com, what's going on? Don't tell us we're losing you to the dark side - the greedy corporate CEO category? You built up a fan base and now are beginning to abuse it with these latest changes - assuming that's your intention? Don't let the increased web stats fool you - it's probably people hunting around for the stuff they can no longer get since the changes.
Now I need to find an alternative source of advisories. I currently follow Full Disclosure, National Vulnerabilities Database, Google's oCert, many other vendor-specific ones and even some of the ones I don't entirely agree with (eg. wabisabilabi). What other web site can I use that will provide what Secunia used to provide me in a usable and timely format? Help!
[Update: They've apologised for the inconvenience, re-added the RSS feed to the new web site and suggested I try their business solutions.]
Currently rated 5.0 by 1 people
- Currently 5/5 Stars.
- 1
- 2
- 3
- 4
- 5