what security lists would you consider "a must" to be on?

[john <lists.john@gmail.com>]

Hello all,

I realize this is a broad question. I'd like to know what security
related lists folks on *this* list subscribe to.
I see that full-disclosure@lists.grok.org.uk and
bugtraq@securityfocus.com are cc'd on the Ubuntu Security
Announcements list.
What lists do you swear by?

Thanks!

John