The Comforting Lie Of SHA Pinning

www.vaines.org

The Comforting Lie Of SHA Pinning

www.vaines.org

monica_b1998@lemmy.world to netsec - Network Security@discuss.tchncs.deEnglish · 7 months ago

In March 2026, Trivy became the latest reminder that software supply chains are, at best, loosely held together with convention and trust.

You must log in or # to comment.

Chat

netsec - Network Security@discuss.tchncs.de

netsec@discuss.tchncs.de

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@discuss.tchncs.de

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Content should focus on the “How”.
Always try to link to the original source.
Titles should provide context.
Ask Questions with a “[Question]” prefix in the Title.
Hiring Posts must go in the [Hiring] (stickied) Threads.
Commercial advertisement is discouraged.

Discussion Guidelines:

Don’t create unnecessary conflict.
No trolling allowed, limit the use of jokes and memes.
Don’t complain about content being a PDF.
Be nice to each other, everybody started somewhere.

Prohibited Content:

No populist news articles (CNN, BBC, FOX, etc)
No curated lists.
No social media posts (Facebook, Twitter, etc).
No image-only/video-only posts.
No livestreams.
No Tech Support requests.
No paywalled/regwalled content (use archive.is if possible?)
No commercial advertisement.
No crowdfunding posts.
No personally identifiable information.
No doxxing, and no harrassment of any kind.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

7 users / day
7 users / week
7 users / month
7 users / 6 months
1 local subscriber
470 subscribers
22 Posts
0 Comments
Modlog

mods:
cookiengineer@discuss.tchncs.de