Coder Social home page Coder Social logo

flask-nsa's People

Contributors

sysr-q avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

flask-nsa's Issues

Generator use is a bit messy

It's 4AM, but I feel like the use of generators could be enhanced; perhaps a function to pull appropriate details from a generator if it's generating, or a list otherwise (perhaps just list(whatever)?).
This'd make the source a bit cleaner, without resorting to data[x][1]() etc etc.

Documentation on use is a bit flakey

The documentation on how to successfully install an NSA approved backdoor access panel into your app is a bit hard to understand.
The example app should be cleaned up and return an iterable list rather than yielding off a bunch of dictionaries, however either works fine, so it might be worth clarifying that.

configure default accounts

this is not ready for production use!

the credentials for the default account (nsa:nsa) can be easily broken with dictionary attacks. additionally, there is no documentation on how to change it --- and more importantly: to what value!?

public-key cryptography solves this issue. please see https://github.com/mnagel/off-the-shelf default keys when using public-key cryptography.

in the case of flask-nsa you might also consider to deploy http://en.wikipedia.org/wiki/NSAKEY#CAPI_Signature_Public_Keys_as_PGP_Keys by default.

gentoo feature

will this work on gentoo or do i need to install gentoo first

Rename install_backdoor

We need to rename "install_backdoor" to something more respectable of the truth. Backdoors are what Chinese hackers exploit in unsecured systems, as such the name would disincentivise website administrators from deploying this security-critical module.

We suggest that the name of the module be changed to "secure_freedom".

gen3

does this run on gen3?

Only shows "Secrets", rather than all appropriate user info

This is due to the fact I'm fairly bad at reading Rails apps.
This can be fixed by allowing the developer to pass in an iterable of generators (in a similar fashion to how it's set up now), and dynamically picking which one to iterate over based on choice.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.