Capsicum cl.cam.ac.uk ↗

A capability-based security framework for POSIX systems, used in FreeBSD.

LibrarySecurity & privacycapabilitiesfreebsdsandboxing

Captured 12 Nov 2026

Recommended in 1 thread

Writing correct software is hard and math alone won’t help us (2016)
pron.github.io · 1 day ago
Removes ambient filesystem access so process behavior is easier to reason about.

Certificate Transparency ↗Security & privacy
A public logging framework that records issued TLS certificates so misissuance can be detected.
1 thread
nginx-http-shibboleth ↗Security & privacy
An nginx module providing Shibboleth authentication support.
0 threads
oss-scanner ↗Security & privacy
Anthropic's open-source tool for scanning OSS projects for vulnerabilities and proposing patches.
1 thread
NIST Small Business Cybersecurity Corner ↗Security & privacy
NIST's portal of cybersecurity resources aimed at small businesses.
1 thread
BoringSSL ↗Security & privacy
Google's fork of OpenSSL used in Chrome and Android.
1 thread
sandbox-runtime ↗Security & privacy
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
2 threads
SafeScript ↗Security & privacy
A JavaScript subset and runtime for executing untrusted code that can only call injected facades.
1 thread
CRLite ↗Security & privacy
Firefox's compressed, privacy-preserving system for checking whether leaf certificates have been revoked.
1 thread

1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
8 threads
YubiKey ↗
A hardware security key supporting FIDO2, PIV and OpenPGP.
5 threads
NoScript ↗
A browser extension that blocks JavaScript and other active content by default.
4 threads
Secretive ↗
A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.
3 threads
Signal
An end-to-end encrypted messaging app.
3 threads
Tor
An anonymity network that routes traffic through volunteer relays.
3 threads
Bubblewrap ↗
An unprivileged Linux sandboxing tool built on namespaces.
2 threads
Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare Turnstile ↗
A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Convergence ↗
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
2 threads
Darknet Diaries ↗
A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.
2 threads

Link from a commenter, not checked or endorsed by us: ↗ https://www.cl.cam.ac.uk/research/security/capsicum/