Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Libre Tools from the National Cybersecurity Competence Center of Luxembourg

opensource.nc3.lu

Post reply on HN
Print view View original

1–10 of 23 posts

Re: Libre Tools from the National Cybersecurity Competence Center of Luxembourg

#5

Post by cedricbonhomme »

rosnd wrote: post #3
cedricbonhomme wrote: post #2

source code of various related projects: https://github.com/NC3-LU/

Which projects do you think would be most interesting to HN users?

I would say this one: https://opensource.nc3.lu/projects/saems/ https://github.com/scandale-project

It's the most recent, really in development. It's about scanning IP ranges, looking for vulnerabilities (in MS Exchange Servers and various things) and sending notifications. Some parts are already used for operational stuff (NMAP Script Engines for example).

An other really interesting project, under AGPL as well: https://opensource.nc3.lu/projects/monarc/

"MONARC is an iterative and qualitative method of risk analysis in four stages, broadly inspired by ISO/IEC 27005." ;-)

And maybe this project: https://github.com/NC3-LU/MOSP As you can see it's a collaborative platform to share security related JSON objects. The nice thing is the object editing user interface automatically generated thanks to the JSON schemas. The project provides an API and is connected to every MONARC instances.

Re: Libre Tools from the National Cybersecurity Competence Center of Luxembourg

#7

Post by tpxl »

i10s wrote: post #6
tpxl wrote: post #4

Earlier quoted context omitted.

Licensed under GNU AGPL, nice.

Interesting to know why exactly this license because GNU GPL3 is more common.

> The GNU Affero General Public License is a modified version of the ordinary GNU GPL version 3. It has one added requirement: if you run a modified program on a server and let other users communicate with it there, your server must also allow them to download the source code corresponding to the modified version running there.

> The purpose of the GNU Affero GPL is to prevent a problem that affects developers of free programs that are often used on servers.

AGPL is GPL3 but better IMO.

Re: Libre Tools from the National Cybersecurity Competence Center of Luxembourg

#8

Post by cedricbonhomme »

i10s wrote: post #6
tpxl wrote: post #4

Earlier quoted context omitted.

Licensed under GNU AGPL, nice.

Interesting to know why exactly this license because GNU GPL3 is more common.

indeed, tpxl is right. Affero GPL fits well for Web software (services provided by a server).

Re: Libre Tools from the National Cybersecurity Competence Center of Luxembourg

#9

Post by gallypette »

cedricbonhomme wrote: post #5
rosnd wrote: post #3

Earlier quoted context omitted.

Which projects do you think would be most interesting to HN users?

I would say this one: https://opensource.nc3.lu/projects/saems/ https://github.com/scandale-project It's the most recent, really in development. It's about scanning IP ranges, looking for vulnerabilities (in MS Exchange Servers and various things) and sending notifications. Some parts are already used for operational stuff (NMAP Script Engines for example). An other really interesting project, under AGPL as well: htt…

scandale-project is also meant to monitor constituencies' actions after being notified about security issues. The idea is to timestamp scan results with a Time Stamp Authority to have a clear and indisputable incident timeline following a notification. The aim is to nudge constituencies to take action and also give them leverage on non-cooperating suppliers. No infrastructure change or patch after repeated notifications is not a good trajectory to be on--hence the name, scandale :)
Post reply on HN