Record · corpus.blog/posts/01a0be06-5eae-704c-bd12-c790c22b0cc5

DEVSEC – Mitigating supply chain software attacks with Yubikey signed GIT commits (sort-of)

securitysandman.com · published 2 September 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securitysandman.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 43
Words captured: 5,749

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://portswigger.net/daily-swig/microsoft-downplays-threat-after-admitting-solarwinds-attackers-accessed-source-code

portswigger.net

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

fireeye.com

https://en.wikipedia.org/wiki/ISO/IEC_7816

en.wikipedia.org

https://gnupg.org/documentation/manuals/gnupg/gpg_002dcard.html

gnupg.org

https://linux.die.net/man/1/scdaemon

linux.die.net

http://g10code.com/docs/openpgp-card-1.0.pdf

g10code.com

https://en.wikipedia.org/wiki/STRIDE_(security

en.wikipedia.org

The anatomy of a Git commit Read at the source ↗

blog.thoughtram.io

https://github.com/git/git/

github.com

https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

git-scm.com

https://docs.gitlab.com/ee/user/project/repository/gpg_signed_commits/

docs.gitlab.com

https://docs.gitlab.com/ee/push_rules/push_rules.html

docs.gitlab.com

https://docs.github.com/en/github/administering-a-repository/defining-the-mergeability-of-pull-requests/managing-a-branch-protection-rule

docs.github.com

https://forum.yubico.com/viewtopicd01c.html?p=9055

forum.yubico.com

https://developers.yubico.com/yubikey-manager/

developers.yubico.com

https://virt-manager.org/

virt-manager.org

https://www.debian.org/

debian.org

OpenBSD Read at the source ↗

openbsd.org

https://www.debian.org/CD/live/

debian.org

https://tails.boum.org/index.en.html

tails.boum.org

https://www.coreboot.org/

coreboot.org

https://github.com/corna/me_cleaner

github.com

https://support.yubico.com/support/solutions/articles/15000028104

support.yubico.com

https://gpg4win.org/download.html

gpg4win.org

https://gnupg.org/download/index.html

gnupg.org

https://github.com/gpg/gpg4win

github.com

https://stackoverflow.com/questions/1158091/defining-a-variable-with-or-without-export/1158231

stackoverflow.com

https://stackoverflow.com/questions/5421107/can-rsa-be-both-used-as-encryption-and-signature/5432623

stackoverflow.com

https://www.jabberwocky.com/software/paperkey/

jabberwocky.com

https://developers.yubico.com/PGP/

developers.yubico.com

https://developers.yubico.com/PIV/Introduction/YubiKey_and_PIV.html

developers.yubico.com

https://docs.yubico.com/software/yubikey/tools/ykman/Using_the_ykman_GUI.html

docs.yubico.com

https://mikegerwitz.com/2012/05/a-git-horror-story-repository-integrity-with-signed-commits

mikegerwitz.com

http://www.gnupg.org/documentation/manuals/gnupg/Invoking-GPG_002dAGENT.html%5B

gnupg.org

https://git-scm.com/book/en/v2/Git-Internals-Git-Objects

git-scm.com

https://www.designveloper.com/blog/hash-values-sha-1-in-git/

designveloper.com

http://g10code.com/docs/openpgp-card-2.0.pdf

g10code.com

http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/os/pkcs11-base-v2.40-os.html

docs.oasis-open.org

https://support.yubico.com/hc/en-us/articles/360016614940-YubiKey-Manager-CLI-ykman-User-Manual

support.yubico.com

https://developers.yubico.com/yubikey-manager-qt/

developers.yubico.com

https://www.dummies.com/computers/operating-systems/windows-10/how-to-use-bitlocker-for-encryption-on-removable-drives/

dummies.com

https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG

support.yubico.com

https://stackoverflow.com/questions/5587513/how-to-export-private-secret-asc-key-to-decrypt-gpg-files

stackoverflow.com