TODO.md: updates

1 files changed, 19 insertions, 1 deletions

diff --git a/TODO.md b/TODO.md
index 290aa8e..8c79691 100644
--- a/TODO.md
+++ b/TODO.md
@@ -223,12 +223,14 @@
   https://github.com/gorhill/uBlock/wiki/Procedural-cosmetic-filters
   <https://rubyweekly.com/issues/620>
   ##table.item:has(p.name > .tag-sponsor)
+  - dark reader
+  - tab stash
 - hardening
   - try out various lsms
     - apparmor
     - lockdown
     - selinux
-  - systemd hardening
+  - systemd hardening (examples: spamassassin config)
   - owasp guides
   - disa stigs
   - dropping system calls (firejail)
@@ -288,6 +290,7 @@
   - sorta: elasticsearch (opensearch), redis
   - reddit, stackoverflow
 - my tools
+  - hnb
   - vim: (2 pragbooks vim books, vimhelp.org, learnvimthehardway)
     - tried neovim, still like vim more
   - irssi
@@ -522,6 +525,8 @@
 - run tails in gnome boxes with persistent storage
   (see x1 notes for details, but it's `qemu-img convert ... qemu-img resize`)
   ref: <https://unix.stackexchange.com/questions/517524/install-tails-with-persistent-storage-on-virtualbox>
+- signal in tails:
+  <https://bisco.org/notes/installing-and-running-signal-on-tails/>
 - bot user-agent blocking:
   <https://www.jwz.org/blog/2025/05/user-agent-blocking/#comment-259206>
   <https://perishablepress.com/ultimate-ai-block-list/> (linked from comment)
@@ -561,6 +566,19 @@
   - eff surveillance self-defense: <https://ssd.eff.org/>
   - msn good article about facebook snafu with a gratuitous omission: <https://www.msn.com/en-us/news/technology/meta-found-a-new-way-to-violate-your-privacy-here-s-what-you-can-do/ar-AA1GecPs>
   - ars comment about ublock origin setting: <https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/?comments=1&post=43767385>
+- spamprobe to spamassassin (notes in v3.txt)
+  - had to disable dnswl check, was causing grief
+  - `sa-check.py`, got 184/200 (~92% true positive rate)
+  - added `sa-train.sh`, runs nightly
+  - updated `~/.mailfilter`
+  - will monitor
+- cwe id in u16, cve id in u32, cvssv3.1 in u64, cvssv4.0 in u64
+  (`~/git/test/rust/nvd-cve/src/lib.rs`)
+  - notes: cvss vector packing does not preserve component order.  this
+    doesn't matter for cvss v4.0, because the component order is fixed.
+- "quick numbers vs accurate numbers"
+  - quick disease test versus blood test
+  - BLS jobs reports
 
 ## linkdump (2022-08-10):
 - css bg fade: