VirtualTam's bookmarks

  1. OWASP CycloneDX - A full-stack Bill of Materials (BOM) standard
    2024-04-02
    programming/go programming/python programming/rust security software-engineering/bill-of-materials
    Permalink
  2. facebookexperimental/kperf - TCP and TLS performance testing tool
    2024-03-31
    network/tcp network/transport-layer-security performance/benchmark programming/c
    Permalink
  3. OpenGFW - A flexible, easy-to-use, open source implementation of GFW (Great Firewall of China) on Linux
    2024-03-31
    linux network/firewall network/ipv4 network/ipv6 network/packet-capture/wireshark programming/go reverse-engineering
    Permalink
  4. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
    2024-03-31
    compression/lzma compression/xz linux programming/c programming/shell/bash security security/backdoor
    Permalink
  5. Comprehensive Rust 🦀 - a free Rust course developed by the Android team at Google
    2024-03-28
    embedded google mobile/android programming/rust
    Permalink
  6. The Family of Safe Golang Libraries is Growing!
    2024-03-25
    compression programming/go security text/formatting
    Permalink
  7. Standard Webhooks - Open source tools and guidelines to send webhooks easily, securely and reliably
    2024-02-28
    network/http programming/json
    Permalink
  8. Have I Been Pwned - Pwned Passwords
    2024-02-28
    programming/go programming/python programming/ruby programming/rust security/credentials security/password
    Permalink
  9. AWS Access Key Format
    2024-02-28
    cloud-computing/aws programming/go programming/python security security/credentials security/token
    Permalink
  10. SOC - System and Organization Controls
    2024-02-17
    code-review infrastructure/automation observability security security/audit security/authentication security/authorization single-sign-on source-code-management/git source-code-management/github
    Permalink
  11. Vulnerability Management for Go
    2024-01-15
    programming/go security static-analysis
    Permalink
  12. Sequoia-PGP - OpenPGP Implementation in Rust
    2023-11-09
    command-line cryptography/encryption cryptography/pgp cryptography/pgp/gnupg linux/debian linux/fedora programming/rust security
    Permalink
  13. Rust Safety Dance - Auditing crates for unsafe code which can be safely replaced
    2023-10-01
    memory programming/assembly programming/rust security/audit
    Permalink
  14. Firezone - WireGuard-based VPN server and firewall
    2023-08-30
    network/udp network/vpn/wireguard security
    Permalink
  15. HAProxy - TLS Termination Setup
    2023-07-24
    cryptography/encryption network/http network/reverse-proxy network/reverse-proxy/haproxy network/transport-layer-security security
    Permalink
  16. Web Security Cheat Sheet | Mozilla Infosec
    2023-07-23
    network/http network/http/cookie network/transport-layer-security programming/html programming/javascript security web
    Permalink
  17. How to manage CVE security vulnerabilities with Grafana, MergeStat, and OSV-Scanner
    2023-06-12
    database observability/grafana security
    Permalink
  18. passkeys - Hello passkeys! Goodbye passwords.
    2023-06-11
    cryptography/public-key-infrastructure internet/browser/chrome internet/browser/firefox mobile/android mobile/ios security/authentication
    Permalink

    Passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing-resistant.

  19. WebAuthn - An API for accessing Public Key Credentials
    2023-06-11
    cryptography/public-key-infrastructure internet/browser security/authentication
    Permalink

    The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

  20. Legacy Rails: Silently Judging You
    2023-06-03
    framework/ruby-on-rails legacy programming/ruby security/audit
    Permalink

    How can you judge the quality of a legacy Rails application?