javabeanz

step7 of docker image build fails

2

I ran "docker build -t photon ." on fresh checkout and got : ---> Running in dafff415cb6d fetch http://dl-cdn.alpinelinux.org/alpine/v3.12/main/x86_64/APKINDEX.tar.gz fetch http://dl-cdn.alpinelinux.org/alpine/v3.12/community/x86_64/APKINDEX.tar.gz ERROR: http://dl-cdn.alpinelinux.org/alpine/v3.12/main: temporary error (try again later) WARNING: Ignoring...

automate threatmodel creation

9

start with java web application by analyzing web.xml, bundled jars, etc.

Purpose

8

is this tool meant for steganographic purposes or does rendering the image trigger the payload ?

- Add labels appropriate to the issue bug - Describe the expected behaviour and the actual behaviour ..... ervice/rabbitmq created deployment.extensions/session-db created service/session-db created deployment.extensions/shipping created service/shipping created deployment.extensions/user-db created...

https://www.trojansource.codes/ https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/

Feature : covert logging

1

covert logging adds an option to log info without attackers being able to detect or alter it. Chapter 6 of Logging and log managment https://www.amazon.com/Logging-Log-Management-Authoritative-Understanding/dp/1597496359

https://bettercodehub.com/ and https://sentry.io/welcome/

https://codecov.io/gh/javabeanz/owasp-security-logging is 38% rather low, we can do better.

in logback RichContext