diff options
| -rw-r--r-- | TODO.md | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -73,6 +73,7 @@ this stuff may not make any sense. https://thecorrespondent.com/655/blockchain-the-amazing-solution-for-almost-nothing/86714927310-8f431cae (not great technically) https://www.usenix.org/publications/loginonline/web3-fraud https://web3isgoinggreat.com/ + https://www.schneier.com/blog/archives/2022/04/de-anonymizing-bitcoin.html * syzkaller/syzbot: https://www.youtube.com/watch?v=YwX4UyXnhz0 * bpf: @@ -147,7 +148,13 @@ this stuff may not make any sense. - organizational namespacing - signing and/or global subdb - declarative install + - typosquatting (see sqo vulns from may email) + - starsquatting (requests, phpass): https://medium.com/checkmarx-security/typosquatting-attack-on-requests-one-of-the-most-popular-python-packages-3b0a329a892d - ref: https://kerkour.com/rust-crate-backdoor + - (related, semver is garbage) + <https://www.linode.com/blog/security/linode-security-digest-rubygems-and-rsyslogs-vulnerabilities/> + - (problems w/ go modules) +* radare2, ghidra ## done * add project folders |