11–20 of 25 posts
strg+f Wireguard: 0/0 I guess maintaining recommendation lists is hard.
First tool: Trello
Hmm okay
Yesterday I needed a regex fuzzer but couldn't find any (except some Windows SDL whatever that means, I'm not developing on Windows) In the end I just created a very limited whitelist of input characters allowed and didn't use a "security tool"
1. Lack of curation (focus on including everything rather than being opinionated)
2. Lack of updates (tools get out of date fast, especially in long lists that try and include everything).
However, THIS list is different. This list is BAD on first publish. Most of the categories are not even remotely security related ("Project Management") or at least not explicitly so ("Supply Chain Management" / "Docker UI" / "Configuration Management"). Yeah sure, some of the latter will be useful for blue teams, but noone on any blue team is going to be searching for those tools under the keyword "security".
Beyond the above, things get worse: the formatting is hopeless, many of the tools are not open-source at all, and while including a lot of irrelevant non-security-related stuff, it omits many obvious well-known security tools.
Flagged for marketing this as "Open source"
I try to do something similar with Threat Intel / OSINT tooling at http://www.threat-intel.xyz . List gets regular updated and curated by hand.
I find such lists nigh unto useless. I don't have time to evaluate each project to see which one is the right fit for my needs. We'd be better off if people did a deep dive analysis of just one of those categories. I suspect that whoever constructs these types of lists does NOT have experience with each project, and thus there's bound to be plenty of projects that don't deserve to be on the list because they're just…
Correct. Also, I've viewed many so-called 'awesome' lists that have out of date, abandoned, discredited, links. Copy Pasted? By all means take a look, but use some perspicacity.