Broken links, typos and similar

mpdse · March 2025

Hi, it's my first post, so to briefly introduce myself, my name is Marko.

I noticed that there is a broken link, on slide
03. Security Basics / How Can We Get There? / Development Processes/Defense-in-Breadth: Using These Processes Together

In the 3rd bullet point there is this link: http://radar.oreilly.com/2014/06/revisiting-what-is-devops.html

A book quotation (Mike Loukides, Revisiting "What Is DevOps", 2014)?

But it goes just to: https://www.oreilly.com/radar/

fcioanca · March 2025

Hi @mpdse

The link was updated to https://web.archive.org/web/20230429215657/http://radar.oreilly.com/2014/06/revisiting-what-is-devops.html.

Thank you for flagging it.
Flavia
Linux Foundation Education

mpdse · March 2025

Hi Flavia,

You’re Welcome, also I found some more.

In chapter 05. Reusing External Software / Supply Chain, in sections

Selecting (Evaluating) Open Source Software
https://github.com/OpenChain-Project/Security-Assurance-Specification/tree/main/Guide/2.0
This one gives 404, but I think they published 2.0, so it's not draft any more? So that would be actually good.
Selecting (Evaluating) Open Source Software
https://github.com/ossf/oss-vulnerability-guide/blob/main/guide.md#readme
This might have been revoked into several guides, I haven't explored git log yet, so I don't know atm.
Downloading and Installing Reusable Software
https://azure.microsoft.com/en-us/resources/3-ways-to-mitigate-risk-using-private-package-feeds/
Redirects to https://azure.microsoft.com/en-us/resources/research/, seems MS has removed the article from there. Searching for it on the web gives some results.

BR, Marko

mpdse · March 2025

And here is a first typo that I could find. There is a sentence in

07 Input Validation / Input Validation: Numbers and Text / Match, Don't Search

A "?" means "end of the string" in some implementations, but nit in others.

This should be not

fcioanca · March 2025

Hi @mpdse

The typo has been fixed. Thank you for flagging it. We have reached out to the course author regarding the broken links and we will update the course once we have replacements.

Best regards,
Flavia
Linux Foundation Education Team

mpdse · March 2025

Hi, here is another link.

07 Input Validation / Consider Availability on All Inputs / Try to Eliminate Easily Amplified Inputs
https://r2c.dev/blog/2020/understanding-and-preventing-dos-in-web-apps/

It seems that the domain changed its name. But it seems the author reported it here, probably?
https://jacobian.org/2020/sep/11/analyzing-dos-vulnerabilities/

Broken links, typos and similar

Comments

Categories

Upcoming Training

Kubernetes Administration (LFS458)

Linux System Administration (LFS301)

Open Source Virtualization (LFS462)

Linux Kernel Debugging and Security (LFD440)