Inferencium/website
1
0
Fork 0
Code Issues Activity

Fix issue anchors to conform to code style

Browse Source
This commit is contained in:
inference 2023-10-31 02:28:35 +00:00
parent 1f840ae6ac
commit a745bcd3b6
Signed by: inference
SSH Key Fingerprint: SHA256:FtEVfx1CmTKMy40VwZvF4k+3TC+QhCWy+EmPRg50Nnc
1 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
blog/systemd_insecurity.html
View File

@ -5,7 +5,7 @@
<!-- Copyright 2022 Jake Winters --> <!-- Copyright 2022 Jake Winters -->
<!-- SPDX-License-Identifier: BSD-3-Clause --> <!-- SPDX-License-Identifier: BSD-3-Clause -->
<!-- Version: 5.0.1-alpha.2 --> <!-- Version: 5.0.1-alpha.3 -->
<html> <html>
@ -35,16 +35,16 @@
<section id="toc"> <section id="toc">
<h2 id="toc"><a href="#toc">Table of Contents<a/></h2> <h2 id="toc"><a href="#toc">Table of Contents<a/></h2>
<ul> <ul>
<li><a href="#issue0">Issue #0 - Against CVE Assignment</a></li> <li><a href="#issue-0">Issue #0 - Against CVE Assignment</a></li>
<li><a href="#issue1">Issue #1 - CVEs Are Not Useful</a></li> <li><a href="#issue-1">Issue #1 - CVEs Are Not Useful</a></li>
<li><a href="#issue2">Issue #2 - Security is a Circus</a></li> <li><a href="#issue-2">Issue #2 - Security is a Circus</a></li>
<li><a href="#issue3">Issue #3 - Blaming the User</a></li> <li><a href="#issue-3">Issue #3 - Blaming the User</a></li>
</ul> </ul>
</section> </section>
<p>Anyone who cares about security may want to switch from systemd as soon as possible; its lead <p>Anyone who cares about security may want to switch from systemd as soon as possible; its lead
developer doesn't care about your security at all.</p> developer doesn't care about your security at all.</p>
<section id="issue0"> <section id="issue-0">
<h2 id="issue0"><a href="#issue0">Issue #0 - Against CVE Assignment</a></h2> <h2 id="issue-0"><a href="#issue-0">Issue #0 - Against CVE Assignment</a></h2>
<br> <br>
<blockquote>"You don't assign CVEs to every single random bugfix we do, do you?"</blockquote> <blockquote>"You don't assign CVEs to every single random bugfix we do, do you?"</blockquote>
<p>- Lennart Poettering, systemd lead developer</p> <p>- Lennart Poettering, systemd lead developer</p>
@ -53,8 +53,8 @@
<p>Source:<br> <p>Source:<br>
<a href="https://github.com/systemd/systemd/pull/5998#issuecomment-303782334">systemd GitHub Issue 5998</a></p> <a href="https://github.com/systemd/systemd/pull/5998#issuecomment-303782334">systemd GitHub Issue 5998</a></p>
</section> </section>
<section id="issue1"> <section id="issue-1">
<h2 id="issue1"><a href="#issue1">Issue #1 - CVEs Are Not Useful</a></h2> <h2 id="issue-1"><a href="#issue-1">Issue #1 - CVEs Are Not Useful</a></h2>
<blockquote>"Humpf, I am not convinced this is the right way to announce this. We never did that, and half the <blockquote>"Humpf, I am not convinced this is the right way to announce this. We never did that, and half the
CVEs aren't useful anyway, hence I am not sure we should start with that now, because it is either CVEs aren't useful anyway, hence I am not sure we should start with that now, because it is either
inherently incomplete or blesses the nonsensical part of the CVE circus which we really shouldn't inherently incomplete or blesses the nonsensical part of the CVE circus which we really shouldn't
@ -67,16 +67,16 @@
<p>Source:<br> <p>Source:<br>
<a href="https://github.com/systemd/systemd/pull/6225#issuecomment-311739869">systemd GitHub Issue 6225</a></p> <a href="https://github.com/systemd/systemd/pull/6225#issuecomment-311739869">systemd GitHub Issue 6225</a></p>
</section> </section>
<section id="issue2"> <section id="issue-2">
<h2 id="issue2"><a href="#issue2">Issue #2 - Security is a Circus</a></h2> <h2 id="issue-2"><a href="#issue-2">Issue #2 - Security is a Circus</a></h2>
<blockquote>"I am not sure I buy enough into the security circus to do that though for any minor <blockquote>"I am not sure I buy enough into the security circus to do that though for any minor
issue..."</blockquote> issue..."</blockquote>
<p>- Lennart Poettering, systemd lead developer</p> <p>- Lennart Poettering, systemd lead developer</p>
<p>Source:<br> <p>Source:<br>
<a href="https://github.com/systemd/systemd/issues/5144#issuecomment-276740654">systemd GitHub Issue 5144</a></p> <a href="https://github.com/systemd/systemd/issues/5144#issuecomment-276740654">systemd GitHub Issue 5144</a></p>
</section> </section>
<section id="issue3"> <section id="issue-3">
<h2 id="issue3"><a href="#issue3">Issue #3 - Blaming the User</a></h2> <h2 id="issue-3"><a href="#issue-3">Issue #3 - Blaming the User</a></h2>
<blockquote>"Yes, as you found out "0day" is not a valid username. I wonder which tool permitted you to create <blockquote>"Yes, as you found out "0day" is not a valid username. I wonder which tool permitted you to create
it in the first place. Note that not permitting numeric first characters is done on purpose: to it in the first place. Note that not permitting numeric first characters is done on purpose: to
avoid ambiguities between numeric UID and textual user names. avoid ambiguities between numeric UID and textual user names.