Add Historical Examples of Exploits / Compromises
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Documentation
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- elixir
- Domain
- content, documentation, security
Research direction
Review the existing security modules, starting with the lesson about disallowing code evaluation in Elixir. Find relevant CVEs, public compromises, or bug-bounty reports and add concise links that contextualize each insecurity. The work is done when the applicable modules have useful historical examples without changing the lesson guidance.
Written by the indexing model from the issue text.
Description
I think it would be super cool to start adding to the various insecurities throughout the modules historical examples of CVEs, public compromises/incidents, etc.
It could be as simple as a link out to other reading, but it could help contextualize the impact and reach a particular issue has in a broader sense.
Example: For the lesson on not allowing code eval in Elixir, link out to maybe an incident a company has had or bug bounty find that allowed for remote code execution.
- Dominant language
- Elixir
- Stars
- 732
- Forks
- 172
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from erlef/elixir-secure-coding
-
bug small adjustment
Difficulty 3/5 1-2 days Newbie friendliness 45/100
erlef/elixir-secure-coding#39 · 1 comment ·
-
small adjustment
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
elixir content new content non-elixir content
erlef/elixir-secure-coding#24 · 1 assignee ·
-
discussion elixir content new content
Difficulty 5/5 Over a week Newbie friendliness 25/100
-
Nerves Security Opendiscussion elixir content new content
Difficulty 5/5 Over a week Newbie friendliness 25/100
All issues in erlef/elixir-secure-coding
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
phoenixframework/phoenix#6847 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
beyond-all-reason/teiserver#1584 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ash-project/ash#2954 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
membraneframework/boombox#149 ·