Collaborate Disseminate
The risks of supply chain attacks on software libraries is well documented, however, I have not seen much on OS packages/dependencies. How important is it to both 1) pin OS dependencies (apt,rpm,etc.) and 2) host them in private repositori… Continue reading Supply chain risks for OS packages
Do all SCA scanners work the same? Do they scan the source or the environment? I’ve seen some SCA that can scan a folder but also python safety just checks pypi. If both, what are advantages/disadvantages of each?
Continue reading Does Software Composition Analysis scan the source code or environment?
Unless there are settings in your browser, whether Windows, Linux or Android, unless expicitly allowed, is it standard design to require user interaction (allowance) in order for a webpage to access the microphone and webcam?… Continue reading Does a website have to ask permission in order to access the microphone and webcam?
When the Android Application Manager reports that an app has been uninstalled, or an app does not or no longer appears in the Application Manager list under any category (installed, running, etc.), is it definitely uninstalle… Continue reading Is the Android Application Manager Infallible?
When the Android Application Manager reports that an app has been uninstalled, or an app does not or no longer appears in the Application Manager list under any category (installed, running, etc.), is it definitely uninstalle… Continue reading Is the Android Application Manager Infallible?
*For the purposes of this post, Software OS Update == Firmware Upgrade. For instance when the device notifies you that there is a OS Software Update, this could also modify the firmware of the device.
QUESTION: I have been g… Continue reading Is it preferable to wipe device first and then upgrade firmware, or vice versa?
I read the following post, and while the questions was specific to SkyRim, the more general answer was that it depends on the game. I wanted to pose a more generic question here to the security folks.
The main concern seemed to be the typ… Continue reading Gaming Mods Security Risks