On: CVE-2014-6277

[sillysaurus3]

if you have any interest in this matter but are only now hearing about it, it is vital that you improve your connection to security news.

What would you suggest?

[alec → sillysaurus3]

My computer runs Debian, so I read debian-security-announce, which gets one email per updated package. Sample of messages from this year: https://lists.debian.org/debian-security-announce/2014/threa...

[dchest → alec]

For Ubuntu:

https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-an...

[schrodingersCat → sillysaurus3]

The subreddits r/netsec and r/crypto can be helpful

[dmix → sillysaurus3]

Follow infosec people on Twitter.

[sillysaurus3 → dmix]

Who would you suggest?

[dmix → sillysaurus3]

There are plenty. Here are a few off the top of my head:

https://twitter.com/ErrataRob

https://twitter.com/mikko

https://twitter.com/thegrugq

https://twitter.com/r_netsec

https://twitter.com/0xabad1dea

https://twitter.com/agl__

https://twitter.com/dinodaizovi

[Phlarp → sillysaurus3]

@erratarob, @thegrugq, @mattblaze, @matthew_d_green, @swiftonsecurity

[sprkyco → sillysaurus3]

http://seclists.org/ is another great resource.