Broken links, typos and similar

mpdse

Hi, it's my first post, so to briefly introduce myself, my name is Marko.

I noticed that there is a broken link, on slide
03. Security Basics / How Can We Get There? / Development Processes/Defense-in-Breadth: Using These Processes Together

In the 3rd bullet point there is this link: http://radar.oreilly.com/2014/06/revisiting-what-is-devops.html

A book quotation (Mike Loukides, Revisiting "What Is DevOps", 2014)?

But it goes just to: https://www.oreilly.com/radar/

fcioanca

Hi @mpdse

The link was updated to https://web.archive.org/web/20230429215657/http://radar.oreilly.com/2014/06/revisiting-what-is-devops.html.

Thank you for flagging it.
Flavia
Linux Foundation Education

mpdse

Hi Flavia,

You’re Welcome, also I found some more.

In chapter 05. Reusing External Software / Supply Chain, in sections

1. Selecting (Evaluating) Open Source Software
   https://github.com/OpenChain-Project/Security-Assurance-Specification/tree/main/Guide/2.0
   This one gives 404, but I think they published 2.0, so it's not draft any more? So that would be actually good.

2. Selecting (Evaluating) Open Source Software
   https://github.com/ossf/oss-vulnerability-guide/blob/main/guide.md#readme
   This might have been revoked into several guides, I haven't explored git log yet, so I don't know atm.

3. Downloading and Installing Reusable Software
   https://azure.microsoft.com/en-us/resources/3-ways-to-mitigate-risk-using-private-package-feeds/
   Redirects to https://azure.microsoft.com/en-us/resources/research/, seems MS has removed the article from there. Searching for it on the web gives some results.

BR, Marko

mpdse

And here is a first typo that I could find. There is a sentence in

07 Input Validation / Input Validation: Numbers and Text / Match, Don't Search

A "?" means "end of the string" in some implementations, but nit in others.

This should be not

fcioanca

Hi @mpdse

The typo has been fixed. Thank you for flagging it. We have reached out to the course author regarding the broken links and we will update the course once we have replacements.

Best regards,
Flavia
Linux Foundation Education Team

mpdse

Hi, here is another link.

07 Input Validation / Consider Availability on All Inputs / Try to Eliminate Easily Amplified Inputs
https://r2c.dev/blog/2020/understanding-and-preventing-dos-in-web-apps/

It seems that the domain changed its name. But it seems the author reported it here, probably?
https://jacobian.org/2020/sep/11/analyzing-dos-vulnerabilities/