Teddy Reed

Abandoned project? Any active development?

36

Has this gem been abandoned? From the increase in pull requests and lack of merging I'm assuming so. But I'm still happily using SettingsLogic in my projects. :) I'm curious...

Use thin LTO for compiling/linking with security environment

1

We want to include CFG by default so we need to move towards removing visibility and adding LTO when building.

There is a bug in how osquery is built as an SDK. The `SQLiteSQLPlugin` should not be included in static libraries that extensions and whatnot build. In rare cases this...

``` ./osquery/management.py:215: server = TServer.TSimpleServer(processor, transport, tfactory, pfactory) ``` Should be replaced, this `TServer` implementation is just an example.

If an exception throws (and is unhandled), the string message should be sent to the active logger plugin.

dm_rockso presence detection limitations

1

> Presence and version scanner, can help you find AMT capable systems regardless of provisioning status. (works even if explicitly not-enabled) Can you elaborate on this? Does this mean any...

TCPChannelResourceSecure/TCPTransportInterface may not check server certificate CN/SAN/hostname [8992]

1

Hi folks, I am working on LGTM queries that look for uses of `boost::asio::ssl::context::set_verify_mode` without using `::set_verify_callback` and saw that is the case with `TCPChannelResourceSecure::set_tls_verify_mode`. ```cpp void TCPChannelResourceSecure::set_tls_verify_mode(const TCPTransportDescriptor* options)...

Hi, I was reviewing the privilege dropping code and saw that the return from `setgroups` is not checked. https://github.com/darkk/redsocks/blob/c3fc945d1f33733e94a485f48a0b963979642b78/base.c#L399 If this call fails then supplemental groups may not be dropped...

Feature request: SMC key descriptions

4

Please include a parsable reference document that includes small descriptions for each key. This could be used as a lookup for other projects reporting on SMC data.

Currently you can only fuzz a uint8 value when the key is fixed. This should support a new switch to define the number of bytes to fuzz similar to zzuf'...