pfirmst

3 ms·

1. 1.▲
   Pack200 for Jar Files(github.com)

   1 points by pfirmst 5mo ago|1 comments
2. 2.▲
   by pfirmst 5mo ago

   Pack200 for jar files, implements support for bytecode versions up to Java 26. Unpacker is hardened against DOS untrusted input. Runs on Java 11 through 26. Each Java version can only unpack pack200 for its version or earlier, cannot unpa
3. 3.▲
   by pfirmst 2y ago

   It requires low level hooks and support from within the JVM, using agents is brittle and difficult to secure, the simplest solution is just to fork. I did spend some time investigating these methods before making the decision. https:&#x2F
4. 4.▲
   by pfirmst 2y ago

   The JVM has a lot of modules and powerful features that, should perimeter defences fail, an attacker has access to. Then there's the issue of vulnerabilities in transitive dependencies upon which trusted libraries might depend, but ar
5. 5.▲
   OpenJDK Authorization(github.com)

   17 points by pfirmst 2y ago|10 comments
6. 6.▲
   by pfirmst 2y ago

   Looking for interested parties to assist maintaining a fork of OpenJDK with authorization. Note this isn't for sandboxing untrusted code but instead only allow loading trusted code and automate generation of principle of least privil
7. 7.▲
   Secure internet micro-services, dynamic discovery, search and events(pfirmstone.github.io)

   2 points by pfirmst 10y ago|0 comments
8. 8.▲
   Hardened Java serialization with input validation(github.com)

   1 points by pfirmst 10y ago|0 comments