Projects in the topic security

Do something useful with the TPM an idea by mwilck Almost all our laptops, and many servers, feature a TPM today. The TPM doesn't have the best reputation in the community because it could be used to lock down platforms or do nasty things with DRM. Under normal conditions on PCs, the TPM is controlled by the system owner and could actually be useful for almost anything involving crypto. Unfortunately the integration of the TPM in the OS is essentially non-existent. The introduction of the TPM2.0 standard complicates matters, because we now have two different devices with different APIs. The goal of this project would be to identify reasonable use cases for the TPM, evaluate exisiting projects, and create ways how to integrate it into various workflows in openSUSE. Updated almost 5 years ago. 3 hacker ♥️. Has no hacker: grab it!
Analyze the security of Linux HTTPS connections and monitor the traffic of "smart" devices an invention by thardeck I have Raspberry Pi with WLAN and an additional network module which can be run as a WIFI access point. Plan Updated about 5 years ago. 1 hackers ♥️.
Securing a CMS by using a hidden CMS and exporting static html to a web server a project by johannes_p Small non profit organisations or activist groups need a Web presence that is easy to maintain by several authors. When using a CMS they do not have the resources to secure the CMS from the various possible attacs most CMSes are notorious for. Defacement or placing malicious content can damage the reputation of such non profit organisations. The solution would be to combine an of the shelf CMS with a static web server that is hosted on a different IP address. The authors would access the CMS through a kind of remote access gateway e.g. openvpn) where access can be well secured with certificates or even hardware tokens. Updated about 4 years ago. 1 hackers ♥️.
Generate CVRF an invention by msmeissn CVRF is a standard where security advisories are encoded in a XML format. We are currently not generating such a format, but it seems to be getting more attention. Updated almost 7 years ago. No love.

Do something useful with the TPM

an idea by mwilck

Almost all our laptops, and many servers, feature a TPM today. The TPM doesn't have the best reputation in the community because it could be used to lock down platforms or do nasty things with DRM. Under normal conditions on PCs, the TPM is controlled by the system owner and could actually be useful for almost anything involving crypto. Unfortunately the integration of the TPM in the OS is essentially non-existent. The introduction of the TPM2.0 standard complicates matters, because we now have two different devices with different APIs. The goal of this project would be to identify reasonable use cases for the TPM, evaluate exisiting projects, and create ways how to integrate it into various workflows in openSUSE.

Updated almost 5 years ago. 3 hacker ♥️. Has no hacker: grab it!

Analyze the security of Linux HTTPS connections and monitor the traffic of "smart" devices

an invention by thardeck

I have Raspberry Pi with WLAN and an additional network module which can be run as a WIFI access point.

Plan

Updated about 5 years ago. 1 hackers ♥️.

Securing a CMS by using a hidden CMS and exporting static html to a web server

a project by johannes_p

Small non profit organisations or activist groups need a Web presence that is easy to maintain by several authors. When using a CMS they do not have the resources to secure the CMS from the various possible attacs most CMSes are notorious for. Defacement or placing malicious content can damage the reputation of such non profit organisations. The solution would be to combine an of the shelf CMS with a static web server that is hosted on a different IP address. The authors would access the CMS through a kind of remote access gateway e.g. openvpn) where access can be well secured with certificates or even hardware tokens.

Updated about 4 years ago. 1 hackers ♥️.

Generate CVRF

an invention by msmeissn

CVRF is a standard where security advisories are encoded in a XML format. We are currently not generating such a format, but it seems to be getting more attention.

Updated almost 7 years ago. No love.