Hello. Here's a proposal to the census: Dropbear Website (90s design, but it seems effective despite not having an own domain): https://matt.ucc.asn.au/dropbear/dropbear.html Contributors: Mostly Matt

Hello. Here's a proposal to the census: zlib Website (90s design, does it count as site?): http://zlib.net Contributors: Only Madler (the famous Mark Adler from JPI's NASA) since 2013. Before that, on

as an aside, from Kit: The NTP problem is really bugging me. Not even recognized as a top-10 ‘risk’ as defined by the CII Census (https://www.coreinfrastructure.org/programs/census-project) with a rea

as an aside, from Kit: The NTP problem is really bugging me. Not even recognized as a top-10 ‘risk’ as defined by the CII Census (https://www.coreinfrastructure.org/programs/census-project) with a rea

Hello! Thanks for inviting me to participate in this project. At Selection Pressure, we are looking at ways to incorporate project risk measurements into one of our products. The CII Census looks like

Dear Core Infrastructure Initiative: I do consulting for several different security companies. The uniform advice across the industry is: if you want to deploy Linux securely, be sure to be using a Gr

We accepted issue#21 in the "develop" branch, which changes the scoring. See here for why and more detail: https://github.com/linuxfoundation/cii-census/issues/21 We'd like to push this branch to mast

FYI, I read about the Linux foundations's core infrastructure census project. Related to this, we analyzed networking related issues in Linux applications a few years back in university: https://www.k

Sam and I have a minor update of the cii-census queued up in the "develop" branch. Below is a draft ChangeLog. I'd like to release the develop branch this Wednesday as the new "master" branch. I don't

Hello, I found the paper about possibly vulnerable and critical software very informative. The paper mostly focused on core, web and development software. However, I think the full list of dependencie

Hi, The Trinity fuzzer is essential to ensuring the security and reliability of the Linux kernel. The author of it has just quit working on it. It would be great if LF could repair the damage done by

Hi, The best you could do for core Linux infrastructure would be to pay for grsec/PaX to be merged into mainline Linux. -- bye, pabs http://bonedaddy.net/pabs3/