mirror of
https://github.com/PrivSec-dev/privsec.dev
synced 2024-12-22 12:51:34 -05:00
53 lines
3.9 KiB
XML
53 lines
3.9 KiB
XML
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||
<channel>
|
||
<title>Operating Systems on PrivSec.dev</title>
|
||
<link>https://privsec.dev/os/</link>
|
||
<description>Recent content in Operating Systems on PrivSec.dev</description>
|
||
<generator>Hugo -- gohugo.io</generator><atom:link href="https://privsec.dev/os/index.xml" rel="self" type="application/rss+xml" />
|
||
<item>
|
||
<title>Choosing Your Desktop Linux Distribution</title>
|
||
<link>https://privsec.dev/os/choosing-your-desktop-linux-distribution/</link>
|
||
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
|
||
|
||
<guid>https://privsec.dev/os/choosing-your-desktop-linux-distribution/</guid>
|
||
<description>Not all Linux distributions are created equal. When choosing a Linux distribution, there are several things you need to keep in mind.
|
||
Release cycle You should choose a distribution which stays close to the stable upstream software releases, typically rolling release distributions. This is because frozen release cycle distributions often don’t update package versions and fall behind on security updates.
|
||
For frozen distributions, package maintainers are expected to backport patches to fix vulnerabilities (Debian is one such example) rather than bump the software to the “next version” released by the upstream developer.</description>
|
||
</item>
|
||
|
||
<item>
|
||
<title>Docker and OCI Hardening</title>
|
||
<link>https://privsec.dev/os/docker-and-oci-hardening/</link>
|
||
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
|
||
|
||
<guid>https://privsec.dev/os/docker-and-oci-hardening/</guid>
|
||
<description>Containers aren&rsquo;t that new fancy thing anymore, but they were a big deal. And they still are. They are a concrete solution to the following problem:
|
||
- Hey, your software doesn&rsquo;t work&hellip;
|
||
- Sorry, it works on my computer! Can&rsquo;t help you.
|
||
Whether we like them or not, containers are here to stay. Their expressiveness and semantics allow for an abstraction of the OS dependencies that a software has, the latter being often dynamically linked against certain libraries.</description>
|
||
</item>
|
||
|
||
<item>
|
||
<title>Linux Insecurities</title>
|
||
<link>https://privsec.dev/os/linux-insecurities/</link>
|
||
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
|
||
|
||
<guid>https://privsec.dev/os/linux-insecurities/</guid>
|
||
<description>There is a common misconception among privacy communities that Linux is one of the more secure operating systems, either because it is open source or because it is widely used in the cloud. This is however, a far cry from reality.
|
||
There is already a very indepth technical blog explaning the various security weaknesses of Linux by Madaidan, Whonix&rsquo;s Security Researcher. This page will attempt to address some of the questions commonly raised in reaction to his blog post.</description>
|
||
</item>
|
||
|
||
<item>
|
||
<title>Securing OpenSSH with FIDO2</title>
|
||
<link>https://privsec.dev/os/securing-openssh-with-fido2/</link>
|
||
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
|
||
|
||
<guid>https://privsec.dev/os/securing-openssh-with-fido2/</guid>
|
||
<description>Passwordless authentication with OpenSSH keys has been the de facto security standard for years. SSH keys are more robust since they&rsquo;re cryptographically sane by default, and are therefore resilient to most bruteforce atacks. They&rsquo;re also easier to manage while enabling a form of decentralized authentication (it&rsquo;s easy and painless to revoke them). So, what&rsquo;s the next step? And more exactly, why would one need something even better?
|
||
Why? The main problem with SSH keys is that they&rsquo;re not magic: they consist of a key pair, of which the private key is stored on your disk.</description>
|
||
</item>
|
||
|
||
</channel>
|
||
</rss>
|