kimg45
00b633af1e
add link to apple platform security
2024-08-09 23:07:25 -05:00
kimg45
fafeab0ac4
add DMA info
2024-08-09 23:05:00 -05:00
kimg45
9b83ec0465
add secure boot info
2024-08-09 23:02:29 -05:00
kimg45
947298da80
Merge branch 'PrivSec-dev:main' into macos
2024-08-09 19:06:09 -05:00
A Racasan
6c2a17dd31
Update Kroo bank play store link ( #260 )
...
Signed-off-by: A Racasan <andrei@racasan.com>
2024-08-09 10:17:48 -07:00
kimg45
d583d90627
add xprotect info
2024-08-08 15:21:55 -05:00
kimg45
a0ae942229
add gatekeeper
2024-08-08 14:06:38 -05:00
kimg45
f55e87b950
add hardened runtime info
2024-08-08 13:38:21 -05:00
kimg45
04dccb9469
add app sandbox info
2024-08-08 13:27:03 -05:00
kimg45
8c0ad3910e
add macos security overview
2024-08-08 12:57:56 -05:00
spring-onion
4e80cb6cfd
Add banking app reports 476 and 477, 479-483 ( #269 )
2024-08-06 15:22:13 -07:00
f8c80c0f45
Remove KDE mentions & Reorganize images in the "Choosing your distro" post ( #267 )
...
* Remove KDE mentions
Signed-off-by: Tommy <contact@tommytran.io>
Co-authored-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Move screenshot location
Signed-off-by: Tommy <contact@tommytran.io>
---------
Signed-off-by: Tommy <contact@tommytran.io>
Co-authored-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-07-31 22:17:19 -07:00
00a5265e14
Clean up Secure Boot section ( #265 )
...
* Clean up Secure Boot section
Signed-off-by: Tommy <contact@tommytran.io>
---------
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-29 11:16:54 -07:00
spring-onion
43bb49155f
Update banking app report 156, add 453 and 473 ( #264 )
2024-07-23 13:28:20 -07:00
Friendly Rabbit
c2b3c19872
Update link to kernel module config ( #262 )
...
Update link to secureblue's kmod blacklist
Signed-off-by: Friendly Rabbit <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-07-21 19:00:02 -07:00
01b9a4cff5
Typo Fix
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-15 13:57:58 -07:00
4abf35e257
Fix zpool commands
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-15 13:26:53 -07:00
Friendly Rabbit
7843b6f163
Fix typos in ZFS Encryption post ( #261 )
...
Fix typos
Signed-off-by: Friendly Rabbit <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-07-07 22:45:01 -07:00
c508504759
Better ZFS properties
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-07-07 20:52:18 -07:00
spring-onion
281f43eabe
Add banking app reports 463-468 and 471 ( #259 )
...
* Add banking app reports 463-468 and 47
2024-07-03 13:49:26 -07:00
9604aed927
Remove Ubuntu USG mention ( #250 )
...
* Remove Ubuntu Pro mention
Signed-off-by: Tommy <contact@tommytran.io>
* Remove USG
---------
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-26 09:52:17 -07:00
eb1098bc37
Change /dev/urandom to /dev/random
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-18 16:07:42 -07:00
spring-onion
714655c49c
Add Egypt, banking app reports 457-462 ( #257 )
2024-06-17 09:12:33 -07:00
friendly-rabbit-35
1ceabea0fc
Update kernel module blacklisting recommendation ( #255 )
...
* Replace Kicksecure kmod blacklist with secureblue's and move disclaimer about Kicksecure morphing
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-06-16 21:40:37 -07:00
friendly-rabbit-35
cbe365251d
Remove link to archived Kicksecure repository for AppArmor profiles ( #254 )
...
* Remove link to deprecated Kicksecure AppArmor profile repo
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Add apparmor.d mention as a reference
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Remove mentions of Whonix sandboxed app launcher and AppArmor profiles
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
---------
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-06-16 15:49:53 -07:00
friendly-rabbit-35
074f5d1813
Remove hardened_malloc mention from Whonix section ( #253 )
...
Remove hardened_malloc mention from Whonix section and expand on Aeon RC
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-06-16 13:53:37 -07:00
7f75180bfc
Update sysctl settings recommendations ( #251 )
...
* Update sysctl settings recommendations
* Update author names
Signed-off-by: Tommy <contact@tommytran.io>
Co-authored-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
2024-06-16 13:47:54 -07:00
6f6b9b5c16
Update hardened_malloc information ( #249 )
...
* Update hardened_malloc information
Signed-off-by: Tommy <contact@tommytran.io>
Co-authored-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
2024-06-16 13:38:37 -07:00
friendly-rabbit-35
4783e250ee
Make grammar changes and apply other fixes across various posts ( #248 )
...
* Make grammar changes and other fixes
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* More fixes and touch-ups
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Clean up
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Make minor grammar changes
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* More cleanup
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Slightly reword
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
---------
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-06-11 14:20:47 -07:00
spring-onion
7b813c8012
Add banking app reports 454-456 ( #243 )
2024-06-06 19:01:18 +00:00
spring-onion
601276190b
Add banking app report 452 ( #242 )
2024-06-03 09:38:07 -07:00
Leonardo Brondani Schenkel
c2958d9525
Move Klarna to international section ( #240 )
...
Klarna is a Swedish company with presence in many countries.
Move it to the International section, just like Revolut.
Signed-off-by: Leonardo Brondani Schenkel <leonardo@schenkel.net>
2024-05-31 10:49:01 -07:00
95f945b56f
Remove fsverity mention
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-29 17:58:01 -07:00
spring-onion
8b5010c633
Add banking app reports 448-451, split 105 ( #239 )
2024-05-28 20:12:52 -07:00
7db27f6074
security_opt expects =
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-28 14:45:27 -07:00
e7d1cff73d
Update kargs
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-27 13:39:09 -07:00
friendly-rabbit-35
ee4909b16a
Fix grammar errors in Lokinet post and in other Qubes posts ( #238 )
...
* Convert hyphen to em dash and noun to verb
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Update link to community guide
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Fix grammar errors
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
---------
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-05-25 19:00:55 -07:00
18770b5c3a
Update Lokinet post ( #237 )
...
* Update Lokinet post
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-24 23:04:23 -07:00
friendly-rabbit-35
5049772a67
Remove provider description and reword other category descriptions ( #235 )
...
* Remove VPN provider description
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Reword description slightly
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Reword description slightly
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Reword description slightly
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Make various grammar changes
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Fix grammar
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Fix grammar
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Fix grammar
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
---------
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-05-25 03:13:23 +00:00
akc3n
70b41194be
Update Netherlands listings ( #236 )
...
Fixes https://github.com/PrivSec-dev/banking-apps-compat-report/issues/105#issuecomment-2036801534
2024-05-25 03:09:53 +00:00
spring-onion
db972bf52b
Add banking app reports 168 and 447, remove 114 and 198, update 162 and 178, move 222 and 305, miscellaneous fixes ( #234 )
2024-05-21 21:50:16 +00:00
ceec9636d2
Fix systemd-resolved restart ratelimiting
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-21 11:54:13 -07:00
36f9afbe98
Restart systemd-resolved before qubes-setup-dnat-to-ns
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-20 16:01:13 -07:00
e97a69d06a
Add StartLimitIntervalSec=0 to dnat-to-ns.service
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-20 13:34:03 -07:00
friendly-rabbit-35
9ef57f03e8
Fix more dead links on Desktop Linux Hardening page ( #232 )
...
* Fix dead links
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
* Remove outdated line about BT
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
---------
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
2024-05-17 16:56:15 -07:00
spring-onion
41c314574f
Update banking app report 39, add 445 and 446 ( #231 )
2024-05-17 10:04:19 -07:00
121f5e3913
Fix IVPN for chaining ProxyVMs
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-17 02:32:12 -07:00
5bf6e2133e
Fix IVPN instructions
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 23:39:11 -07:00
8e140c3ac9
--now is not needed for Mullvad setup
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 23:36:46 -07:00
f70a162f66
Fix file name
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 19:27:44 -07:00
546c814e21
Using IVPN on Qubes OS ( #230 )
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 19:17:31 -07:00
6b8b46f455
More info on Qubes VPN Firewall handling
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 17:08:32 -07:00
friendly-rabbit-35
2a0f8344d7
Fix dead links on Desktop Linux Hardening page ( #228 )
...
* Make various grammar and wording changes for improved clarity
* Fix dead link
---------
Signed-off-by: friendly-rabbit-35 <chariot-barbed-0v@icloud.com>
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-16 16:03:26 -07:00
5c422f217d
Stress that the Mullvad guide is for GNOME
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-12 04:58:16 -07:00
5cb4ad0ede
Use systemd path for dnat-to-ns ( #227 )
...
* Use systemd path for dnat-to-ns
Signed-off-by: Tommy <contact@tommytran.io>
* Make the flow better
Signed-off-by: Tommy <contact@tommytran.io>
---------
Signed-off-by: Tommy <contact@tommytran.io>
2024-05-12 04:43:07 -07:00
spring-onion
a96b20cea0
Update banking app 39, add 442 and 444 ( #226 )
2024-05-09 07:08:43 +00:00
365c717bc1
ChromeOS's Questionable Encryption ( #222 )
...
* ChromeOS's Questionable Encryption
Signed-off-by: Tommy <contact@tommytran.io>
* Add metadata
Signed-off-by: Tommy <contact@tommytran.io>
* Minor fixes
Signed-off-by: Tommy <contact@tommytran.io>
* Minor fix
Signed-off-by: Tommy <contact@tommytran.io>
* Update ChromeOS Questionable Encryption.md
Signed-off-by: Tommy <contact@tommytran.io>
* Update ChromeOS Questionable Encryption
* Fix link
* Edits
---------
Signed-off-by: Tommy <contact@tommytran.io>
Co-authored-by: wj25czxj47bu6q <git@wj25.xn--q9jyb4c>
Co-authored-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
2024-04-25 22:32:31 -07:00
d2f1ab85ba
Add --nosocket=session-bus and --nosocket=system-bus
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-24 23:30:05 -07:00
spring-onion
bcba4cc4db
Add banking app report 440 ( #225 )
2024-04-24 22:33:55 -07:00
spring-onion
8178eadd48
Add banking app reports 432-436, 438 and 439, update names and sanitize links ( #224 )
2024-04-22 15:19:30 -07:00
xyhhx
4ef5e890de
fix(linux/Docker and OCI Hardening): correction on no_new_privs option ( #223 )
2024-04-19 02:49:30 +00:00
d824a1ccae
Instruction to disable XWayland
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-15 01:26:29 -07:00
0c2cc614d0
Rename MicroOS to Aeon
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-15 00:32:10 -07:00
Salim B
b93f2767b0
Fix typo ( #220 )
...
Signed-off-by: Salim B <git@salim.space>
2024-04-14 22:50:31 +00:00
fe158e7e04
Blacklist dconf dbus
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-13 22:16:41 -07:00
spring-onion
e003699f05
Add banking app reports 430 and 431, update 195 ( #221 )
2024-04-13 21:43:22 -07:00
81eb3f8dd0
Block org.gnome.Shell.Extensions
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-13 20:58:58 -07:00
spring-onion
8b85beeb27
Add banking app reports 425, 427-429 ( #219 )
2024-04-10 08:02:53 +00:00
spring-onion
e8c862b145
Update banking app report 382, add 424 ( #218 )
...
Update 382, add 424
2024-04-06 05:11:37 +00:00
2526628d64
Add --no-talk-name=org.freedesktop.systemd1
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-02 17:51:23 -07:00
07f018f614
Add --no-talk-name=org.freedesktop.Flatpak
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-04-02 17:04:05 -07:00
3468272e9d
Add noclientlog
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-03-25 11:43:30 -07:00
4776c3e812
Update hardened malloc info ( #216 )
...
* Update hardened malloc info
Signed-off-by: Tommy <contact@tommytran.io>
* Add link
Signed-off-by: Tommy <contact@tommytran.io>
---------
Signed-off-by: Tommy <contact@tommytran.io>
2024-03-24 23:30:19 -07:00
2099c44cec
Fi VPN works on GrapheneOS now
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-03-24 23:29:25 -07:00
spring-onion
a5106f6907
Add banking app reports 399, 404-409, 411 and 412 ( #215 )
2024-03-24 07:42:17 +00:00
spring-onion
d450ab906f
Add Peru and banking app reports 410, 413-417, 419-421, 423 ( #217 )
2024-03-24 05:57:36 +00:00
34bb760d13
Remove extra_latent_entropy
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-02-26 21:47:39 -07:00
akc3n
0f8ca4d10d
Add @spring-onion as co-maintainer credit and remove a nitter link ( #213 )
...
Add @spring-onion to author credit as maintainer
2024-02-18 08:36:11 +00:00
spring-onion
2e2616152d
Separate international and national banking apps, move 90 and 127 ( #211 )
2024-02-17 11:16:30 +00:00
spring-onion
40717510ca
Added China and banking app reports 393-395, 397, 398, 400-403 ( #210 )
2024-02-15 07:56:29 +00:00
846933379b
Update kernel args
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-02-09 19:47:36 -07:00
064f629d22
Update Butane URL
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-02-07 22:33:59 -07:00
samsepi0l
c6964ecb07
Update GrapheneOS link ( #207 )
2024-01-31 08:10:09 -07:00
spring-onion
23d3212693
Add Philippines, New Zealand, Colombia, banking app reports 381-392 ( #206 )
2024-01-28 08:02:41 +00:00
spring-onion
8058f71c22
Add banking app reports 374-378 and 380 ( #205 )
2024-01-18 20:40:13 +00:00
9cf68cc7a8
Add Fedora CoreOS butane file for mac NTS
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-16 02:34:21 -07:00
42c8545109
Stress that carrier tracking behavior differs per carrier/SoC
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-15 02:01:42 -07:00
d6a3a94287
Carrier tracking clarifications
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-15 01:48:25 -07:00
0ce2ac190d
Disable 32 bit emulation
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-15 01:24:49 -07:00
e5607c74c6
Update flatpak overrides
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-15 01:14:53 -07:00
c817cfc4da
Update flatpak override recommendation
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-11 01:53:58 -07:00
891bb0eaf6
Stop recommending Sway
...
Signed-off-by: Tommy <contact@tommytran.io>
2024-01-11 01:37:59 -07:00
akc3n
0a90d5045a
Fix typo ( #201 )
...
Fix typos
2024-01-08 15:46:21 +00:00
spring-onion
f57a485008
Overhaul old banking app reports, page 1 and 2 ( #200 )
...
Overhaul old reports, page 1 and 2
2024-01-08 15:45:38 +00:00
spring-onion
6dd5b146b6
Add Croatia and banking app reports 359, 369, 370, 371 and 373 ( #197 )
2023-12-30 23:06:32 -07:00
eennoo
bde088eb81
Add banking report #368 ( #195 )
...
* Add banking report #368
Signed-off-by: eennoo <53978854+eennoo@users.noreply.github.com>
* Minor edit
Signed-off-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
---------
Signed-off-by: eennoo <53978854+eennoo@users.noreply.github.com>
Signed-off-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
Co-authored-by: wj25czxj47bu6q <96372288+wj25czxj47bu6q@users.noreply.github.com>
2023-12-25 02:22:17 +00:00
spring-onion
4e12601d6a
Add banking app reports 366 and 367 ( #194 )
2023-12-21 01:43:14 +00:00
akc3n
cb3e04cf4a
Add banking app reports 360-365 and update some sections ( #193 )
2023-12-18 04:39:49 +00:00
spring-onion
95877b5c64
Update banking app report 265 ( #192 )
2023-12-18 04:39:12 +00:00
spring-onion
ea2c86eb6c
Add Bulgaria and banking app reports 348, 349, 352-358, update 326 ( #191 )
2023-12-17 02:13:33 +00:00
