Skip to content

issues Search Results · repo:ossf/secure-sw-dev-fundamentals language:CSS

Filter by

44 results
 (55 ms)

44 results

inossf/secure-sw-dev-fundamentals (press backspace or delete to remove)

ossf/secure-sw-dev-fundamentals
Add reference to EU CRA, especially annex I

The EU CRA is large, but it might be reasonable to walk through CRA annex I. For more about the CRA, see OpenSSF blog post on CRA part 1 and OpenSSF blog post on CRA part 2
  • david-a-wheeler
  • Opened 
    on Dec 12, 2024
  • #184

ossf/secure-sw-dev-fundamentals
Add new lab for arguments

See: https://github.com/ossf/wg-best-practices-os-developers/pull/638
  • david-a-wheeler
  • Opened 
    on Oct 7, 2024
  • #175

ossf/secure-sw-dev-fundamentals
Need to fix availability test question

Availability is a part of security. We have a test question whose purpose was to emphasize how hard it is to always do it, but the question goes too far needs fixing: image
  • david-a-wheeler
  • Opened 
    on Aug 1, 2024
  • #162

ossf/secure-sw-dev-fundamentals
Including EPSS in addition to CVSS?

As mentioned in the training material CVSS has some issues, and in practice it results to a large list of vulnerabilities that need to be addressed even though if it doesn t overlap with the vulnerabilities ...
  • nmav
  • Opened 
    on Jul 30, 2024
  • #161

ossf/secure-sw-dev-fundamentals
Add discussion on peer review and signing

  • david-a-wheeler
  • Opened 
    on Nov 29, 2023
  • #146

ossf/secure-sw-dev-fundamentals
Put images in `images/` folder

Hi there, what if we put images in a separate folder, eg: images/? This will make the repo more structured and IMHO, cleaner.
  • za
  • 1
  • Opened 
    on Aug 29, 2023
  • #141

ossf/secure-sw-dev-fundamentals
Example(s) for "You should instead have a plan for handling when (not if) your cryptographic algorithms and protocols are broken."?

In Applying Cryptography - Humility Is Important in Cryptography , you write that: You should instead have a plan for handling when (not if) your cryptographic algorithms and protocols are broken. Make ...
  • TobiasWehrum
  • Opened 
    on Aug 26, 2023
  • #140

ossf/secure-sw-dev-fundamentals
Embedded software: Add firmware info, make it clear it applies

Make it clear that this material applies to embedded software (as well as cloud, server-side apps, client-side apps, mobile apps, etc.), and add any material that might be needed. I reviewed the OWASP ...
  • david-a-wheeler
  • 1
  • Opened 
    on Jul 26, 2023
  • #135

ossf/secure-sw-dev-fundamentals
Provide alternatives for telling the user that "an account with that email address already exists" during signup

In the Minimize Feedback / Information Exposure section, you write: If a user tries to create an account using an email address, don t tell the user if an account with that email address already exists. ...
  • TobiasWehrum
  • 2
  • Opened 
    on Jul 26, 2023
  • #134

ossf/secure-sw-dev-fundamentals
Note SHA-256 length extension attack, HMAC, replay attacks

For more: - https://kerkour.com/sha256-length-extension-attacks - https://news.ycombinator.com/item?id=36058754
  • david-a-wheeler
  • 1
  • Opened 
    on May 25, 2023
  • #128
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub