Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

254
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.3

#securitybydesign

0 posts0 participants0 posts today
CHERI Alliance<p>One of our founding directors, Mike Eftimakis, sat down with Akshaya Asokan from Information Security Media Group (ISMG) to explore how CHERI is helping tackle one of cybersecurity’s biggest challenges: memory safety.</p><p>CHERI (Capability Hardware Enhanced RISC Instructions) is a hardware-based approach to security, designed to prevent around 70% of today’s common vulnerabilities. Backed by industry leaders and the UK government, we're working to ensure global adoption across the electronics supply chain.</p><p>Watch the interview to learn more about:</p><p>💠 How CHERI addresses memory safety issues<br>💠 Common hardware supply chain vulnerabilities<br>💠 Progress on adoption by chipmakers<br>💠 Scalability challenges associated with CHERI</p><p>🎥 Watch the full interview: <a href="https://www.bankinfosecurity.com/uks-cheri-alliance-expands-to-global-hardware-supply-chain-a-28942" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">bankinfosecurity.com/uks-cheri</span><span class="invisible">-alliance-expands-to-global-hardware-supply-chain-a-28942</span></a></p><p><a href="https://infosec.exchange/tags/CHERI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CHERI</span></a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HardwareSecurity</span></a> <a href="https://infosec.exchange/tags/MemorySafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MemorySafety</span></a> <a href="https://infosec.exchange/tags/SecurityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityByDesign</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>InfoSec</span></a></p>
xoron :verified:<p>Are Web Components &amp; Cybersecurity A Better Combo?</p><p>I'm not trying to dunk on popular <a href="https://infosec.exchange/tags/UI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>UI</span></a> <a href="https://infosec.exchange/tags/frameworks" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>frameworks</span></a> – I'm sure they're totally fine for <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> stuff, probably get loads of reviews and <a href="https://infosec.exchange/tags/audits" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>audits</span></a>.</p><p>But from my angle: Web Components are *native* to the <a href="https://infosec.exchange/tags/browser" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>browser</span></a>. Doesn't that just inherently reduce the risk of **<a href="https://infosec.exchange/tags/SupplyChainAttacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SupplyChainAttacks</span></a>** (you know, like a rogue `npm install` on a bad network) for your <a href="https://infosec.exchange/tags/AppSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AppSecurity</span></a>?</p><p>Or am I overthinking it, and the <a href="https://infosec.exchange/tags/framework" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>framework</span></a> choice is less important than the <a href="https://infosec.exchange/tags/browser" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>browser</span></a>, <a href="https://infosec.exchange/tags/OS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OS</span></a>, or <a href="https://infosec.exchange/tags/device" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>device</span></a> running it? What are your thoughts, <a href="https://infosec.exchange/tags/DevCommunity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevCommunity</span></a>?</p><p>---</p><p>Quick context: I've got a <a href="https://infosec.exchange/tags/ReactJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ReactJS</span></a> <a href="https://infosec.exchange/tags/messagingApp" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>messagingApp</span></a> (repo here: <a href="https://github.com/positive-intentions/chat" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/positive-intentions</span><span class="invisible">/chat</span></a>) and a separate <a href="https://infosec.exchange/tags/UIFramework" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>UIFramework</span></a> (repo here: <a href="https://github.com/positive-intentions/dim" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/positive-intentions</span><span class="invisible">/dim</span></a>) built with <a href="https://infosec.exchange/tags/Lit" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Lit</span></a> (which uses Web Components). I'm genuinely wondering if there's a compelling <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> reason to refactor the chat app to use my <a href="https://infosec.exchange/tags/WebComponent" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WebComponent</span></a> UI framework. Might be a whole new level of <a href="https://infosec.exchange/tags/SecurityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityByDesign</span></a> for <a href="https://infosec.exchange/tags/FrontEndDev" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FrontEndDev</span></a>.</p><p>FYI, same question's on Reddit here: <a href="https://www.reddit.com/r/ExperiencedDevs/comments/1lmk1rg/are_web_components_better_for_cybersecurity/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">reddit.com/r/ExperiencedDevs/c</span><span class="invisible">omments/1lmk1rg/are_web_components_better_for_cybersecurity/</span></a>, got some good <a href="https://infosec.exchange/tags/insights" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>insights</span></a>, but want to make sure nothing's getting overlooked! Let's discuss <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>InfoSec</span></a> <a href="https://infosec.exchange/tags/WebDev" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WebDev</span></a> <a href="https://infosec.exchange/tags/JavaScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>JavaScript</span></a> <a href="https://infosec.exchange/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenSource</span></a> <a href="https://infosec.exchange/tags/TechQuestion" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TechQuestion</span></a>.</p>
Jan de Muijnck-Hughes<p>*Last Call* </p><p>I have a <a href="https://discuss.systems/tags/PhD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PhD</span></a> position for UK students, available with myself and <span class="h-card" translate="no"><a href="https://types.pl/@bentnib" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>bentnib</span></a></span> </p><p>This project will be looking at developing new methods for asserting the resilience of existing communicating systems by developing new static analysis methods derived from advanced programming language research.</p><p>*Hard Deadline*: Wednesday 16th April 2025</p><p>You will belong to <span class="h-card" translate="no"><a href="https://mastodon.acm.org/@StrathCyber" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>StrathCyber</span></a></span> and <span class="h-card" translate="no"><a href="https://mastodon.acm.org/@mspstrath" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>mspstrath</span></a></span>, as well as gaining access to <span class="h-card" translate="no"><a href="https://mastodon.scot/@spli" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>spli</span></a></span> </p><p><a href="https://www.strath.ac.uk/studywithus/postgraduateresearchphdopportunities/science/computerinformationsciences/towardstype-drivenassuranceofcommunicatingsystems/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">strath.ac.uk/studywithus/postg</span><span class="invisible">raduateresearchphdopportunities/science/computerinformationsciences/towardstype-drivenassuranceofcommunicatingsystems/</span></a></p><p>(Ignore the deadline on the advert)</p><p>Please spread the words. </p><p><a href="https://discuss.systems/tags/dependentTypes" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>dependentTypes</span></a> <a href="https://discuss.systems/tags/formalMethods" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>formalMethods</span></a> <a href="https://discuss.systems/tags/idris" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>idris</span></a> <a href="https://discuss.systems/tags/programmingLanguageTheory" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>programmingLanguageTheory</span></a> <a href="https://discuss.systems/tags/typeTheory" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>typeTheory</span></a> <a href="https://discuss.systems/tags/idris2" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>idris2</span></a> <a href="https://discuss.systems/tags/computerSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>computerSecurity</span></a> <a href="https://discuss.systems/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://discuss.systems/tags/securityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>securityByDesign</span></a> <a href="https://discuss.systems/tags/secureByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>secureByDesign</span></a></p>
Paul Rosenzweig<p>Another good @lawfare entry in the <a href="https://thecooltable.wtf/tags/SecuritybyDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecuritybyDesign</span></a> series: <a href="https://www.lawfaremedia.org/article/privacy-by-design--lessons-for--security-by-design" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">lawfaremedia.org/article/priva</span><span class="invisible">cy-by-design--lessons-for--security-by-design</span></a></p>
Patrick Breyer<p>🇬🇧 <a href="https://digitalcourage.social/tags/xz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>xz</span></a> attack: Unknown persons attempted to install a global, highly dangerous backdoor in IT systems.</p><p>Beware: The 🇪🇺 Commission is planning "legal" backdoors for devices &amp; apps! PR-speak: <a href="https://digitalcourage.social/tags/AccessByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AccessByDesign</span></a> / <a href="https://digitalcourage.social/tags/SecurityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityByDesign</span></a><br><a href="https://home-affairs.ec.europa.eu/document/download/17739cd7-098e-4df3-8f41-37be73560086_en?filename=HLG-WG1-background-document-05122023_en.pdf" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">home-affairs.ec.europa.eu/docu</span><span class="invisible">ment/download/17739cd7-098e-4df3-8f41-37be73560086_en?filename=HLG-WG1-background-document-05122023_en.pdf</span></a> @GreensEFA<br>More: <a href="https://digitalcourage.social/tags/EUGoingDark" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EUGoingDark</span></a></p>
Luddite under protest<p><span class="h-card" translate="no"><a href="https://woof.tech/@Frisk" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>Frisk</span></a></span> I would rather to see a bounty to get <span class="h-card" translate="no"><a href="https://mastodon.matrix.org/@matrix" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>matrix</span></a></span> to stop using <a href="https://eattherich.club/tags/CaaC" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CaaC</span></a> (Cloudflare as a Crutch) and switch to <a href="https://eattherich.club/tags/securityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>securityByDesign</span></a>. I can’t be motivated to donate to <a href="https://eattherich.club/tags/Matrix" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Matrix</span></a> project until it shakes free from its tech giant dependency.</p><p><a href="https://sopuli.xyz/post/8923970" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">sopuli.xyz/post/8923970</span><span class="invisible"></span></a></p>
TrendingLive feeds
About