From 318dde63584a48505aac8d527565725d3bff9bbd Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 23 Jul 2022 07:38:10 -0400 Subject: [PATCH] Minor Fixes --- _headers | 2 +- config.yml | 15 ++++++++------- content/knowledge/FLOSS Security.md | 3 +-- netlify.toml | 2 +- static/privsec.png | Bin 0 -> 8084 bytes 5 files changed, 11 insertions(+), 11 deletions(-) create mode 100644 static/privsec.png diff --git a/_headers b/_headers index dc1b9d6..5531ad9 100644 --- a/_headers +++ b/_headers @@ -5,5 +5,5 @@ Cross-Origin-Opener-Policy : same-origin X-Frame-Options : DENY X-XSS-Protection : 0 - Permissions-Policy : accelerometer=(), autoplay=(), camera=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=() + Permissions-Policy : accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb(), sync-xhr=(), xr-spatial-tracking=() Cross-Origin-Resource-Policy : same-origin diff --git a/config.yml b/config.yml index 2853651..8dfda9e 100644 --- a/config.yml +++ b/config.yml @@ -2,7 +2,6 @@ baseURL: "https://privsec.dev" title: PrivSec.dev theme: WonderMod copyright: '[CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/)' - enableRobotsTXT: true minify: @@ -13,9 +12,11 @@ params: env: production # to enable google analytics, opengraph, twitter-cards and schema. author: PrivSec Team # author: ["Me", "You"] # multiple authors + description: A practical approach to Privacy and Security + keywords: [Privacy, Security] defaultTheme: dark # dark, light disableThemeToggle: false - + images: ["/privsec.png"] ShowReadingTime: true ShowPostNavLinks: true ShowBreadCrumbs: true @@ -28,9 +29,9 @@ params: # disableHLJS: true # to disable highlight.js disableFingerprinting: true favicon: "/favicon.ico" - favicon16x16: "" - favicon32x32: "" - apple_touch_icon: "" + favicon16x16: "/favicon-16x16.png" + favicon32x32: "/favicon-32x32.png" + apple_touch_icon: "/apple-touch-icon.png" label: text: "PrivSec.dev" @@ -63,9 +64,9 @@ params: url: /index.xml cover: - hidden: true # hide everywhere but not in structured data + hidden: false # hide everywhere but not in structured data hiddenInList: true # hide on list pages and home - hiddenInSingle: true # hide on single page + hiddenInSingle: false # hide on single page editPost: URL: "https://github.com/PrivSec-dev/privsec.dev/blob/main/content" diff --git a/content/knowledge/FLOSS Security.md b/content/knowledge/FLOSS Security.md index 2bbf102..fb4ce8d 100644 --- a/content/knowledge/FLOSS Security.md +++ b/content/knowledge/FLOSS Security.md @@ -137,8 +137,7 @@ Fuzzing doesn't necessarily depend on access to source code, as it is a black-bo Fuzzing frequently catches bugs that are only apparent by running a program, not by reading source code. Even so, the biggest beneficiaries of fuzzing are open source projects. [cURL](https://github.com/curl/curl-fuzzer), [OpenSSL](https://github.com/openssl/openssl/tree/master/fuzz), web browsers, text rendering libraries (HarfBuzz, FreeType) and toolchains (GCC, Clang, the official Go toolchain, etc.) are some notable examples. - -> \- I've said it before but let me say it again: fuzzing is really the top method to find problems in curl once we've fixed all flaws that the static analyzers we use have pointed out. The primary fuzzing for curl is done by OSS-Fuzz, that tirelessly keeps hammering on the most recent curl code. +> I've said it before but let me say it again: fuzzing is really the top method to find problems in curl once we've fixed all flaws that the static analyzers we use have pointed out. The primary fuzzing for curl is done by OSS-Fuzz, that tirelessly keeps hammering on the most recent curl code. - [Daniel Stenberg](https://daniel.haxx.se/) | [A Google grant for libcurl work](https://daniel.haxx.se/blog/2020/09/23/a-google-grant-for-libcurl-work/) diff --git a/netlify.toml b/netlify.toml index 443fe97..01ae9e2 100644 --- a/netlify.toml +++ b/netlify.toml @@ -8,7 +8,7 @@ Cross-Origin-Opener-Policy = "same-origin" X-Frame-Options = "DENY" X-XSS-Protection = "0" - Permissions-Policy = "accelerometer=(), autoplay=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" + Permissions-Policy = "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), sync-xhr=(), xr-spatial-tracking=()" Cross-Origin-Resource-Policy = "same-origin" Expect-CT = "max-age=63072000, enforce" diff --git a/static/privsec.png b/static/privsec.png new file mode 100644 index 0000000000000000000000000000000000000000..d3cecbaa6354e57e9884b6a73491d03558fbed0b GIT binary patch literal 8084 zcmdV9RZtra@b8-h3ls@XaVrEXr9dfCq(E_Zr?^unRyifkJS%;8MK! z`Tb|k>zO-qU+%dN`?5Rxu=}0a+1*cssqk1|EogG3;>Auj&mSn zY#?yw;2clUMDC_^zpUcd3=z9d>AppLI6k=0_JSM<%zf=?jzlOW-BPke70KI5-#Db{ zT&Qqj-}ghODnVt2m4WO!_Q`3OC0c2^vMv|netp8$Ety(_GJ5~l7XSY&4|d}1C0oKi z(r~R*b0eoxi^Ud&xa4b^+k3m2E>H<%M<(u4{V6kroF|$tl@3Q$L3MwvA!0A2pO^p;M zbNHDWnR&dB5#TXs99W$sUnDHpYS-0@74GQZ#aJ*nXX1R#7v}^7eGuTjcVMIx<-L2f zD@7LC=1Z~Wh*V%sURJbnd#tom#bbam1WD!= z&ZLD-Wvg2mjnJf)UYin&f9an5)r(LwLPO_d{-R^itYZ}ClzNOIj*Tx15O@0t zy0r98!sqaF#oKf)6-%1-ZH6c#!k&S_DF|BOUV7S>QGJ)wD??-`tK(I^2?&cSfIcV~ zc^2d@-TY=dZl?G8-tzFoR-FcmD5I0Q0UJQ?cCagk99wOf)20Lf=y)7JL;X069ZtALe zaW6nh?dNyUSaf*qp`|ASoB!1HaEG|rV+hR}UMe#2E))w(t*hoX;LQpYsQ&iTzv0%r zZ`{Fn2-N}Z57=G$DuFFtBjykUkT|9D8C$JxQIfN6>|va^r$ zUG0evNFX}TsCwF^I31Tu_IGQpaKpcH@TPl}Q^XVFVQf(j({s@SooO}&Z9r|i<*zZk za!IAx`KEw$*EuB_)Twp4aUr`kPk{7Cx~QZ}hRLV2>Q{*$6NpO$MR>0;6%&`clnH3AGVG}|K{S*ONwtbIzLPO7VW5w8?W&ilyi-R11QCy?& z`G7Z+T!&3yBrGpv0&u($UN=)B`vKJd?i$s>Rt*q$^!zzJ^ZdK%B_`x~ZY}F93Zl(|9b+sk_S9a|C#~K0=!#-w>#+4- z<2OE8-nBFdSLL*cQN)k$h&Ki>W_IvwF{yA51^A~<@mj(PTpaj~hF`yxQ8|8tvxvYmhk3Idw%LE4yqc&vh8`oQHNU2U5<&wIcaG*A=>@| zZ{^yWrPuzJ!oZpY8t(-u^5%tgi(x5+7a2tNBgH~{Aba{=j58Z>aE#Mwr8{ellyD-17b#~DtZrBG_PL5mLrUH)$oRcet^qXyLkPV2e`4K>S9 z{u^?z>`;9sJp0ef9}=X_O|36wk4&11Gd>EIQPVz&;1Zem{C&(gnLQ9M^OP5gR0ODU z{!XK@CLA?d&NO1XRM3@+@t4m<7Eh1K>$Q=Gi#&}Xq8^fBp1-ZRb!I}(I6Ki~zZF}b z1r=bTv^{5M7|y*$k=)iXGVUul{r)FyRDDGIGz$a-{zhCB0+pZ8=J`?}DruLqRB$Sk zj_7IYN;$$4G8{P@Uzrew!fZGO6c4A6m`uaN4T)i^u&Kz zJ4Nu0+gCC+&s@3-qheCe(`+@R9yE~K%ee%ZgheghWAUYuqZ=MHbh+XVxbR2E)n!+E z4x~Q&Yi|dwa`f+AkthB>K~@A)ztCV+aXy}yBmUn6yLY~LE$^PU2%;YjU~-u!HGURj+J$D^8Le%aHusbr7O#Hfq`CCvKBzobwC>%!Il+nyo!I4S+wHWmvG}Uk1x6gTu}5=uAGzj$%Wb&inF}%yN}L zY6v-J6t|i_-$o?G+aGlb3d71aO@ZsQw4R004F;?rsW0QpKjmZTW4)i;s$g`M9>wn> z@yy7!Z}E_**~jZ6?d3yKS-L-yyYoELPMH7*gWK(nmKk+X-PKvK&eD%ad$MpMih&~E zf$6-no}X$+D4oe7hoIb+jDZEC`p7}Hy1g)DkLr0SIhYwsezfE13H519t#n@((~)ul z1rVb&A?0zRv`n(%1?p9FDPKwr9Ys1ZbHVj78OlKQoTs8Q+R(DUQ$;+&f`0hiQI+r{h%eI0We7Q_4z%GH%NT{ zk`jTguwGfX8{peG%h%iO`^gt$pvF?Rr8$Ymi#0^C;l;t~h?$&_UGtYUBiA2_=$`KX zPD)B`r8RjZ+FPXWS9HxXvF) zC-zX~eOjrG3Lkp9*FFU5XdvGJ0lpN}CBjnpk5g{Be;aUj zJalOb@7gQb?|kiwdP4Ft6}%>f{wkb{s*L61=fVc0j&q)7wZE*Sbf@++M_ev$-F`fz z*NfC=t71OePnZ-9MzWSH5MoqTDT!uvycLw4--TY?sC0f?{W98)k0i=FJN^*#!W z_;*3B&^mht4I|cf0Ng8Nt?_w%FakUK3vXN!4H^LE`>Hf+Zz1_yea5w?2UiLVxn)c5 z=Q~vm18xr63Pgtj^RzXeDNZ7fxOCqKZrEXRp1R*W9v~Dh5a4ilgKc9cO+jF)RNENO_s*e?o=Vl$TIXthl&z_p3TGRa zz=BE!s*l%Cmf6C4%v$-)LLgh@pM~impH^i_BTofZ!bQ}eujGqBz^mFCyd1?6oOCfV zS4+yv{8Osoujwcv^1 zuRo^)Q}=DhaT>*4gjbGn-bN;VmQq{jqUv22FwrjhkGJ*GpmY$2Vj_Z=# zO+1<(i09+vNBYKGD$l_WLz4h_Hni<(yC<*n4K!2QzSJzoE~BB|&5XcW3!d9i=m#>kOx;YV+;sB^4 zcg0bY0i0bB*CNo>OC*JB+QW$q2tzY5>ViNHKxx2X?&sUT+(r`V4S8tl_4mx3<^={# z5HMh1T3+O^hE7>~9d3R|MJ2^gQ_e4LX#U(hFQcEUMKp2RrJ~=p)p9iuDH1XeDSL~@ zM1|nQ0IB->@qBI~WNAj9TQ4!H6fzhmqQ8DIXNGcwH^4A%Z^cXwFGmlhvCtQ=&Q@6E zFQVPF(^#}pe?ls}S6_&{soCT;b(Azr9MU~fCTvFZBnjr7I0awsgZKLi>d{2T?*c-8 zwtO%uatFbhm>>$R+Ww^4bfWrPsS)yMt&y{LW&pV9@1v81YXA`1R+k%zpX-q{(O4IH znKGNYNic$vjd2Yb+IaD5t>az8@v?mG04}YX&?e9OzIn{thh4KCR&Dl!b&QUnD(-4+QcPe;J z-2AF}T}Ra0+h$UZZ&YLDT3b__%b;FEi3pX!oMExQQ?dX;UcHGVm6ttqm#)BIyfk`r zWs&_m30yP?_-7$GW53va*_LLgAILD}TfO&^!UYHOg0q2B|1gTcW3xwNK9O6hUT8=! z352b*dTSQg>;NY7_YuQHu^9jxnV|!y1-6{m;&Ff#QdPNj&*>@4FGVlJeU? z8h7Wff~S4$@mnaK$youRk_nDlaQM4TQjWu~o2^-v>_YT$hbEa=+dY9S1jRvlQ#N9i`;+(6oBlr_Cn^UoQ4pQx$4U zggJshfvs(bk}y<$#HXWI&6s)0m6jECS}I^%^icD|JV!Md^pbDLtY1sX_ZGSSM1+AY zSQF&>#ZUIu|4G`W5x?BOxdnHjn5Hi|>cCk{^X}tAz9|7dmgCr*d<7^^e3_I`UE$b{t8h5gz&eh%&TLz ztijH9G02eB&dSkpPC@px^AsNKGj+=XHz$R}mb*&F{xs|?QWWN1{jkPOJeWlPe0_Vt zpBW*)l;!(rl%;Mp|G^lG-@SR6W8T-;pzKW2>?Op}hC*Ahe6(^7q?ke$HenJy4|sYR zV|H;-omIUzPPO!OsaQf`Vw?c>;R4iz=6%+3ybNu?1w&YC-}`^_Y(p`b%_FEgy)Q`E z5JZ9hqKchysd4`J(*tbwD^bxC(kbS|$A0F)p_mF&cFGheceSB zMewmnj6az0Ciy>E1OjT-oZ_rCq)hk~{&KpqwHBow~f_ME0pkv3Ds-GyF`mKwyh*^EuY#c$2F%ZpyVun+NRuG)8Jn zSLeHF{RTcq7e-4>S(YP-_zyihH)MwyL@!_^lM=b-1ig1@TB4I%P62pd?XOKTf1TR24raM4>RgDzBl@5KqeG%DgWp zsVW>FY4&#{Q$ut!ZD{s__0(gGmezkt9Pp>^tWYzydC>lpF3KvVgNOrW^AY@Y3B4th zV`>rcJlJqi5GVn_arXZ<=Z0O@qD(vNZ&H_VMmXn{yK>4wd#qGT1Xg|M`v}i^%!AZ$aalE8hl5By z0j__qSJNxxy8<30Ho0j#R&uc;_aTrR%O*19ri4yVnYWh>9W~YJQavSjc(8Z=^E8)X zTv5@7xhfOf@SJPvKEH{r>U-x+>92ADS1C@XJ@EtEjrkdbohQ%$neOCYrDSMo`H~=! z@jXrlz7Gx^5w?3R{B`nr9teLaT)Dum<`@P;M=(ZaUdy_rYguN~iInKVoy>YmzgZLxH-ZdV!zUyzQ) ze|=DE@k>5YzK@`ya8(Jo{nD<{Xb%JAoUoir_$ZA~eyK4R%^Mt(fzF~$_I|&O9MLYg zvf6)7mFV;LWFb~JTMQH6xE~|tsj~jh>H7lWQbxcz^Ownrkr9@YdfThke905UhKL)U zQh8%d@%b}0bn-m|>zT%AzR7X~A=cr@UH*6YBQrv4cH3^RSgzY&mBV|)O3a;uQQK1e z!<~|Wm+9vFB+Mcs0jFX3QnJ7QVhuTipWWQ?OM!}PL=c!HtD~DYXi{4*p?oxpfX3N~ zoLmf5WNkPTJltobY5r5@^fv}{mNj{THL`K!*fF?ja36Lsy5i|GqBQJ*0nqokaca7A zaWH`Q&~rKcKwt%1{Gz=#8>Ydykhga}ogk)LeNB74$?iDre4klh>FKj()2plP@D@UHrP;!WCt&j#)fnK(FP>pB z@!<(&9t_iu0RY7n97%)Tex^q|hT)kPZ$n@GoJvOb1|I^L z&b*cCemz?i@e%UR6q+r1`>!S1TDN3*I(gpaj}=X_!NYy5Zj*SF>x6%)Qnza1e;-)u zw>6~J^~l|o8kQHd0DRf(-0Ik2A9ev!tV}MQ>myJZmz?d^3KrT+WiHL{>YMPSce_?$ z2OlpZi*4MaeCE>JV~(3S{!__ zJJ>UWsq!40lL;&P_RjI}S6Lj%!fY9_-*E1RM5LX z)#apVx7=I5JPRF^czJF&?wP_~;PsqPo5}wpFcE}i_DZ+AQ(APlR^7>6ct;qQQ`h_4 zLd!&SZWSE_k!PI})dK+7zD`8b&C2mr-pbU#4H+brCu86SaaichYhj%}Q?AH|IB)y; zDErf~2b*D*L=RCa!PUytKMxq~V`<)#2bY+~TE2gnp!=xiGxLQ??Ohna^2Yskp5+ix zAF(UyLg0)@W8xSe(=z~FBPMeoffb+=Oh&Hg(;*@Z+ZXc!<2 z+#NOE;1cF@H=?9n4(W%U+A$11^^3Ho^<-OU;VW_qGnBvV2F^H@TKQ*I7 zcoAlF1&wt8Wrvgs8O691(*r82O07v;w%jH=q)7cW?=fr;d{X=P6%HN_e!ru zL4vuS<^%|MhRWY=xkux2E>S2_@g|pDAQfCTMh8%wJTRoRPPd77pM-^>rtuOOn<+Gt zMTUzIg{CF~W|6p+92?~$N{OZ7JpYN|m-Hur>Kk4B5++hP3Gu~_`$Te z;E#vq&*z~72dWYt%g0O>*YF)$(zCo5-E|FR%ar literal 0 HcmV?d00001