1
0
mirror of https://github.com/PrivSec-dev/privsec.dev synced 2024-07-02 07:46:22 -04:00
A practical approach to Privacy and Security
Go to file
Andrea Pappacoda 214b811afc
linux distros: link to DSA-1571 (#64)
The Release Cycle section shows how the classic patching process of
distributions isn't always effective, and can even introduce additional
bugs and vulnerabilities non present in the upstream project. The two
linked examples, though, are not that insightful; the first one links to
a double free caused by an erroneous bugfix backport, while the second
shows a simple crash, but caused by a patch not relevant to the backport
of patches but wrote by a Debian developer trying to port the library
to another kernel. In short, the second linked bug has little to do with
the issue described in the guide.

This small patch replaces the aforementioned Firefox bug report with
the Debian Security Advisory 1571 (DSA-1571), describing a serious bug
introduced in the OpenSSL crypto library by an incautious backport of a
security fix, only present in Debian's OpenSSL package. In my opinion, it
gives to the reader a clearer idea of what a partial backport can cause.


Signed-off-by: Andrea Pappacoda <andrea@pappacoda.it>
2022-10-06 22:23:18 -04:00
.github Update dependabot.yaml 2022-08-25 18:40:23 -04:00
archetypes Initial Hugo Setup 2022-07-16 08:14:16 -04:00
content linux distros: link to DSA-1571 (#64) 2022-10-06 22:23:18 -04:00
layouts/_default Remove unnecessary partial 2022-09-09 03:28:41 -04:00
static Add Redirects 2022-09-28 16:11:26 -04:00
themes Bump themes/WonderMod from ddaf94c to bbfb6f5 (#59) 2022-09-06 13:46:09 -04:00
.gitignore Switch to Netlify 2022-08-25 18:40:09 -04:00
.gitmodules Switch to WonderMod (#26) 2022-08-25 18:40:14 -04:00
config.yml Change Title 2022-09-28 11:32:34 -04:00
external-blogs.sh Move banking app list to PrivSec 2022-09-28 13:55:37 -04:00
LICENSE Update LICENSE 2022-08-25 18:40:15 -04:00
netlify.toml Hugo v0.104.3 2022-10-04 17:54:28 -04:00
README.md Move banking app list to PrivSec 2022-09-28 13:55:37 -04:00

PrivSec.dev

A practical approach to Privacy and Security

Netlify Status

Licensing

The website content (under /content) is under the Attribution-ShareAlike 4.0 International license.

The articles originally posted on wonderfall.dev and seirdy.one are under the same license. Articles originally posted on wanderingcomputerer.gitlab.io are under the Attribution 4.0 International license.

The Hugo Framework used to create this website is under the Apache License.

The WonderMod theme used for the website and modifications made by us are under the MIT License.

Netlify Previews

We use Netlify to host our website and generate previews. Simply add your articles inside of /content or make any modifications that you want, open a new Pull Request and a preview page will be generated for you automatically.

Local Development

  1. Install Hugo
  2. Clone this repository: git clone --recurse-submodules https://github.com/PrivSec-dev/privsec.dev
  3. Run hugo serve to start the local development server at (by default) http://localhost:1313
    • Alternatively run hugo to simply build the site into the /public directory
  • Run git submodule update --merge to update the WonderMod theme to the version specified in this repo
    • Run git submodule update --remote --merge to update to the upstream master branch of WonderMod
  • Run ./external-blogs.sh to pull the latest versions of the articles from wonderfall.dev and place them in /content