cdfc1d246e
Largely the same stuff, but modify a few recommendations and add a couple of other ones. See CHANGELOG.md for complete details. Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org>
12 lines
494 B
Markdown
12 lines
494 B
Markdown
# 2017-01-23
|
|
## Linux workstation security checklist
|
|
|
|
- add warning that attackers routinely brute-force simple passphrases
|
|
- recommend switching to Wayland
|
|
- Replace browser-in-VM recommendation with firejail-separated profiles
|
|
instead
|
|
- List NitroKey in addition to Yubikey
|
|
- Add recommendation to use Fido U2F for services supporting it
|
|
- Add SubgraphOS alongside QubesOS (though SubgraphOS is still in alpha)
|
|
- Not adding Flatpak/Snappy yet, as the list of supported apps is pretty pithy
|