VirtualTam's bookmarks

1. gittuf - A security layer for Git, with key management and permissions for branches and tags 2024-05-13

   tags: automotive, embedded, security, source-code-management/git, trust

   [ permalink ]

   • gittuf/gittuf
   • ossf/wg-supply-chain-integrity
   • OpenSSF - Introducing gittuf: A Security Layer for Git Repositories
   • LWN - Securing Git repositories with gittuf
   • TUF - The Update Framework
   • Uptane - A Secure Software Update Framework for Automobiles
2. Blessed | An unofficial guide to the Rust ecosystem 2022-11-08

   tags: documentation, programming/library, programming/rust

   [ permalink ]

   A common complaint from new Rust developers is that they don't know where to start: which crates they ought to use and which crates they ought to trust. This list attempts to answer those questions.

3. mkcert: A simple zero-config tool to make locally trusted development certificates with any names you'd like. 2021-12-26

   tags: cryptography/certificate, cryptography/certificate-authority, programming/go

   [ permalink ]

   • https://blog.filippo.io/mkcert-valid-https-certificates-for-localhost/
4. BeyondCorp | Run Zero Trust Security Like Google 2018-05-18

   tags: google, infrastructure, network, public, security

   [ permalink ]

   • https://ai.google/research/pubs/pub43231
5. pfSense® - World's Most Trusted Open Source Firewall 2018-01-19

   tags: bsd/freebsd, network, network/firewall, network/router, unix

   [ permalink ]

   • https://github.com/pfsense
   • https://www.reddit.com/r/PFSENSE/
6. DMARC How-tos / FAQ 2017-12-21

   tags: email, email/dkim, email/dmarc, email/spam, email/spf, network/dns, record, trust

   [ permalink ]

   • https://blog.returnpath.com/how-to-explain-dmarc-in-plain-english/

   • https://blog.returnpath.com/infographic-how-to-prevent-email-fraud-with-dmarc/

   • https://blog.returnpath.com/build-your-dmarc-record-in-15-minutes-v2/

   • https://blog.returnpath.com/demystifying-the-dmarc-record/

   • https://blog.returnpath.com/how-to-read-your-first-dmarc-reports-part-1/

   • https://blog.returnpath.com/how-to-read-your-first-dmarc-reports-part-2/

   • https://webmasters.stackexchange.com/questions/102509/dmarc-understanding-aggregate-reports

   • https://webmasters.stackexchange.com/questions/90326/dmarc-spf-fail-dkim-pass-source-ip-not-mine

   • https://www.endpoint.com/blog/2014/04/15/spf-dkim-and-dmarc-brief-explanation

   • https://stackoverflow.com/questions/30342550/why-do-i-receive-a-dmarc-report-everyday

   • https://dmarc.org/wiki/FAQ

7. DMARC reports analysis tools 2017-12-21

   tags: email, email/dmarc, email/spam, network/dns, record, spoof, trust, visualization

   [ permalink ]

   • https://dmarc.org/resources/code-and-libraries/
   • https://blog.returnpath.com/how-to-read-your-first-dmarc-reports-part-1/
   • https://domainaware.github.io/checkdmarc/
   • https://github.com/domainaware/checkdmarc
   • https://github.com/domainaware/parsedmarc
   • https://github.com/trailofbits/dmarc
   • https://github.com/beckspaced/Dmarc-Report-Viewer-Extended
   • https://github.com/linkedin/lafayette/
   • https://github.com/thinkingserious/sendgrid-python-dmarc-parser
   • https://github.com/prbinu/dmarc-report-processor
   • https://github.com/alan-hicks/django-dmarc
   • https://github.com/martinhoefling/go-dmarc-report
   • https://github.com/cheatas/DMARCate
8. CentOS 7.0 - man page for update-ca-trust (centos section 8) - Unix & Linux Commands 2017-06-30

   tags: cryptography/certificate, linux, linux/centos, linux/red-hat, network/transport-layer-security

   [ permalink ]
9. QA engineer walks into a bar 2016-08-16

   tags: continuous-integration, input, programming/testing, qa, trust, user

   [ permalink ]

   QA Engineer walks into a bar. Orders a beer. Orders 0 beers. Orders 999999999 beers. Orders a lizard. Orders -1 beers. Orders a sfdeljknesv.

   via https://github.com/minimaxir/big-list-of-naughty-strings via https://www.sempf.net/post/On-Testing1.aspx

10. [tor-talk] Why the Web of Trust Sucks 2015-08-02

    tags: cryptography/pgp, gpg, key, network/tor, security/identification, signature, trust, web

    [ permalink ]
11. SKS key server 2015-08-02

    tags: cryptography/pgp, gnu, gpg, key, privacy, signature, trust, web

    [ permalink ]

    PGP key server & pool

    • http://sks.spodhuis.org/
    • http://pgp.mit.edu/