e-m-b-a/emba
1
0
Fork 0
mirror of https://github.com/e-m-b-a/emba.git synced 2026-10-11 22:09:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update SECURITY.md with changes and new contacts

Browse Source 
Removed mention of read-only filesystem and added new contact methods for reporting vulnerabilities.
This commit is contained in:
Michael Messner
2026-09-17 11:12:00 +02:00
committed by GitHub
parent 6c0ad0b709
commit 77b8bf6e39
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+4 -1
View File
@@ -4,13 +4,14 @@ _EMBA_ is a platform for optimizing our research and testing tasks in the field
# WARNING
_EMBA_ is using multiple protection layers like chroot, docker, read-only filesystem, non executable mounts and disabled networking functionality.
_EMBA_ is using multiple protection layers like chroot, docker, non executable mounts and disabled networking functionality.
Nevertheless, _EMBA_ should only be used on test systems! It should not be installed/deployed on production systems.
There are multiple reasons for that:
* The _EMBA_ docker container is running in privileged mode which will result in full system compromise if you are testing malicious firmware.
* _EMBA_ automatically executes untrusted code from the firmware which could lead to breakouts that are able to compromise the host system.
* _EMBA_ automatically builds and boots a firmware image based on the untrusted firmware under test.
* _EMBA_ is heavily based on a lot of different components that are sometimes outdated and not well maintained anymore.
## Reporting a Vulnerability
@@ -19,3 +20,5 @@ If there is a security problem within _EMBA_ please open an issue or contact us
* [Start a Discussion](https://github.com/e-m-b-a/emba/discussions)
* [PM us via Twitter](https://twitter.com/securefirmware)
* [PM us via Mastodon](https://infosec.exchange/@securefirmware)
* [PM us via BlueSky](https://bsky.app/profile/securefirmware.bsky.social)
* [Contact me directly on LinkedIn](https://www.linkedin.com/in/michael-messner-4421243a/)