Category: security
-
Mirroring known vulnerability data globally, for free.
If you just want the answer to “where do I find a reliable global mirror of NVD vulnerability data?” the answer is https://cveb.in/ . It is being mirrored on the same servers used for major open source projects so you’re probably already trusting them. If you want to hear the story of how we got…
-
Best practices in practice: Software release tracking and end of life
Continuing in my “best practices in practice series” : an API for finding the list of available software versions and an API for finding out if those versions are still actively supported (and for how long).
-
Best practices in practice: pre-commit
Continuing in my “best practices in practice series” : today’s tool is `pre-commit`. Using pre-commit takes a bunch of failure points out of our code quality and security process, and I highly recommend it.
-
Academic notes #1: “‘Passwords Keep Me Safe’ – Understanding What Children Think about Passwords “
This is the first of what might be a series of posts about academic research I’ve read/watched. Today’s talk is called “‘Passwords Keep Me Safe’ – Understanding What Children Think about Passwords” from USENIX Security 2021. This is the first large-scale study of kids and passwords and the results don’t seem too surprising (in a…
-
Academic notes series
I mentioned in my previous post that I was feeling a bit weird about not really being connected to the academic world any more. I’m still sorting out how I feel about that and whether I have any long term plans, but I thought it might be nice to listen to some talks and write…