diff --git a/docs/basics/multi-factor-authentication.md b/docs/basics/multi-factor-authentication.md index 9c358af8..6fe9eab1 100644 --- a/docs/basics/multi-factor-authentication.md +++ b/docs/basics/multi-factor-authentication.md @@ -75,11 +75,9 @@ WebAuthn is the most secure and private form of second factor authentication. Wh When you create an account, the public key is sent to the service, then when you log in, the service will require you to "sign" some data with your private key. The benefit of this is that no password data is ever stored by the service, so there is nothing for an adversary to steal. -This presentation discusses the history of password authentication, the pitfalls (such as password reuse), and discussion of FIDO2 and [WebAuthn](https://webauthn.guide) standards. +This presentation discusses the history of password authentication, the pitfalls (such as password reuse), and the standards for FIDO2 and [WebAuthn](https://webauthn.guide): -
+- [How FIDO2 and WebAuthn Stop Account Takeovers](https://youtu.be/aMo4ZlWznao) (YouTube) FIDO2 and WebAuthn have superior security and privacy properties when compared to any MFA methods. diff --git a/docs/os/linux-overview.md b/docs/os/linux-overview.md index ef7f91d3..405e22a2 100644 --- a/docs/os/linux-overview.md +++ b/docs/os/linux-overview.md @@ -45,9 +45,7 @@ For frozen distributions such as [Debian](https://debian.org/security/faq#handli We don’t believe holding packages back and applying interim patches is a good idea, as it diverges from the way the developer might have intended the software to work. [Richard Brown](https://rootco.de/aboutme) has a presentation about this: - +- [Regular Releases are Wrong, Roll for your life](https://youtu.be/i8c0mg_mS7U) (YouTube) ### Traditional vs Atomic Updates @@ -55,11 +53,9 @@ Traditionally, Linux distributions update by sequentially updating the desired p Atomic updating distributions, on the other hand, apply updates in full or not at all. On an atomic distribution, if an error occurs while updating (perhaps due to a power failure), nothing is changed on the system. -The atomic update method can achieve reliability with this model and is used for [distributions](../desktop.md#atomic-distributions) like Silverblue and NixOS. [Adam Šamalík](https://twitter.com/adsamalik) provided a presentation on how `rpm-ostree` works with Silverblue: +The atomic update method can achieve reliability with this model and is used for [distributions](../desktop.md#atomic-distributions) like Silverblue and NixOS. [Adam Šamalík](https://twitter.com/adsamalik) provides a presentation on how `rpm-ostree` works with Silverblue: - +- [Let's try Fedora Silverblue — an immutable desktop OS! - Adam Šamalik](https://youtu.be/aMo4ZlWznao) (YouTube) ### “Security-focused” distributions