corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07df5-2eb5-734f-a785-2fce158f7649

The right thing for the wrong reasons: FLOSS doesn't imply security

Seirdy · published 2 February 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at seirdy.one Wayback capture
2blogs citing
First cited
6 Apr 2022
Most recent
18 Jul 2022
Rank this month
not ranked
Links from this post
68
Words captured
4,477

Cited by

Blog
In the post
Date
privsec.dev
Linux Insecurities Read at the source ↗
18 Jul 2022
zerolimits.dev
Intro to Privacy, Security and Anonymity Read at the source ↗
6 Apr 2022

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Underhanded_C_Contest
en.wikipedia.org
https://strace.io/
strace.io
https://sr.ht/~seirdy/bwrap-scripts/
sr.ht
https://github.com/containers/bubblewrap
github.com
https://www.wireshark.org/
wireshark.org
https://en.wikipedia.org/wiki/Core_dump
en.wikipedia.org
https://dwarfstd.org/
dwarfstd.org
https://twitter.com/MisteFr/status/1168597562703716354?s=20
twitter.com
https://citizenlab.ca/
citizenlab.ca
https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/
citizenlab.ca
https://mitmproxy.org/
mitmproxy.org
https://rizin.re/
rizin.re
https://ghidra-sre.org/
ghidra-sre.org
https://www.hybrid-analysis.com/sample/1ef3b7e9ba5f486afe53fcbd71f69c3f9a01813f35732222f64c0981a0906429/5e428f69c88e9e64c33afe64
hybrid-analysis.com
https://github.com/cuckoosandbox
github.com
https://drakvuf.com/
drakvuf.com
https://twitter.com/igorskochinsky
twitter.com
https://github.com/skochinsky/me-tools
github.com
https://github.com/corna
github.com
https://github.com/corna/me_cleaner
github.com
https://fahrplan.events.ccc.de/congress/2017/Fahrplan/system/event_attachments/attachments/000/003/391/original/Intel_ME_myths_and_reality.pdf
fahrplan.events.ccc.de
https://kth.diva-portal.org/smash/get/diva2:508256/FULLTEXT01
kth.diva-portal.org
https://recon.cx/2014/slides/Recon%202014%20Skochinsky.pdf
recon.cx
https://link.springer.com/book/10.1007/978-1-4302-6572-6
link.springer.com
https://io.netgarage.org/me/
io.netgarage.org
https://www.blackhat.com/eu-17/speakers/Mark-Ermolov.html
blackhat.com
https://www.blackhat.com/eu-17/speakers/Maxim-Goryachy.html
blackhat.com
https://www.blackhat.com/docs/eu-17/materials/eu-17-Goryachy-How-To-Hack-A-Turned-Off-Computer-Or-Running-Unsigned-Code-In-Intel-Management-Engine-wp.pdf
blackhat.com
https://web.archive.org/web/20210302072839/themerkle.com/what-is-the-intel-management-engine-backdoor/
web.archive.org
https://en.wikipedia.org/wiki/Fuzzing
en.wikipedia.org
https://lcamtuf.coredump.cx/afl/
lcamtuf.coredump.cx
https://aflplus.plus/docs/binaryonly_fuzzing/
aflplus.plus
https://github.com/KissPeter/APIFuzzer/
github.com
https://github.com/curl/curl-fuzzer
github.com
https://github.com/openssl/openssl/tree/master/fuzz
github.com
https://daniel.haxx.se/
daniel.haxx.se
https://daniel.haxx.se/blog/2020/09/23/a-google-grant-for-libcurl-work/
daniel.haxx.se
https://github.com/google/AFL/blob/master/docs/QuickStartGuide.txt
github.com
https://www.openwall.com/lists/oss-security/2022/01/18/7
openwall.com
https://github.com/google/syzkaller
github.com
https://www.willsroot.io/2022/01/cve-2022-0185.html
willsroot.io
https://willsroot.io
willsroot.io
https://seirdy.one/2021/01/27/whatsapp-and-the-domestication-of-users/
seirdy.one
https://clang.llvm.org/docs/ControlFlowIntegrity.html
clang.llvm.org
https://www.broken-by-design.fr/
broken-by-design.fr
https://lemmy.ml/post/167321/comment/117774
lemmy.ml
https://matrix.to/
matrix.to
https://drewdevault.com/
drewdevault.com
https://madaidans-insecurities.github.io/linux.html
madaidans-insecurities.github.io
https://en.wikipedia.org/wiki/Analytical_Engine
en.wikipedia.org
https://en.wikipedia.org/wiki/Dependent_type
en.wikipedia.org
https://adrian.geek.nz/
adrian.geek.nz
https://en.wikipedia.org/wiki/Matrix_digital_rain
en.wikipedia.org
https://github.com/Whonix/sandbox-app-launcher
github.com
https://github.com/BurntSushi/ripgrep
github.com
https://blog.didierstevens.com/2020/12/14/decrypting-tls-streams-with-wireshark-part-1/
blog.didierstevens.com
https://www.minetest.net/
minetest.net
https://content.minetest.net/packages/Wuzzy/mineclone2/
content.minetest.net
https://invisiblethingslab.com/resources/misc09/Quest%20To%20The%20Core%20%28public%29.pdf
invisiblethingslab.com
https://bugs.launchpad.net/calibre/+bug/1714107
bugs.launchpad.net
https://github.com/eli-schwartz
github.com
https://flaviutamas.com/
flaviutamas.com
https://calibre-ebook.com/new-in/fourteen
calibre-ebook.com
https://web.archive.org/web/20211021222659/http://cybersecurity.upv.es/attacks/offset2lib/offset2lib-paper.pdf
web.archive.org
https://grsecurity.net/PaX-presentation.pdf
grsecurity.net
Technology preview: Private contact discovery for Signal Read at the source ↗
signal.org
https://en.wikipedia.org/wiki/Trusted_execution_environment
en.wikipedia.org
https://en.wikipedia.org/wiki/Software_Guard_Extensions
en.wikipedia.org