From 31868158ea83620432c85d6e74536f773b214d14 Mon Sep 17 00:00:00 2001 From: Landon Curt Noll Date: Mon, 15 Jul 2024 14:25:04 -0700 Subject: [PATCH] improve the result of pr 2570 We improve the language in `SECURITY.md` and the resulting `SECURITY.html` page, and add an important disclaimer. We also add that same disclaimer to the bottom of the of the main `index.html` we page (via `index.md`). --- SECURITY.html | 34 +++++++++++++++++++++++++--------- SECURITY.md | 32 +++++++++++++++++++++++++++----- bin/md2html.cfg | 33 ++++++++++++++++----------------- index.html | 3 +++ index.md | 7 +++++++ 5 files changed, 78 insertions(+), 31 deletions(-) diff --git a/SECURITY.html b/SECURITY.html index 8740ad42e..7a8020788 100644 --- a/SECURITY.html +++ b/SECURITY.html @@ -12,8 +12,8 @@ The International Obfuscated C Code Contest - - + + @@ -365,10 +365,11 @@ IOCCC image by Matt Zucker

The International Obfuscated C Code Contest

+

IOCCC Security Policy

@@ -389,16 +390,31 @@

Security Policy

Supported Versions

-

ALL CODE IN ALL IOCCC ENTRIES IS UNSUPPORTED!!

-

Use code in this repo at your own risk! We will NOT provide security updates to any IOCCC entry code!

+

ALL IOCCC ENTRY CODE IS UNSUPPORTED!!

+

We will NOT provide security updates to any IOCCC entry code!

Reporting a Vulnerability

Even though ALL IOCCC ENTRY CODE IS UNSUPPORTED, if you wish to discuss a security concern regarding this repo then please send email the IOCCC judges by consulting the bottom section -of the How to contact the IOCCC web page. -If, on the other hand, you wish to discuss a possible vulnerability in the -mkiocccentry repo then please report it -here. +of the How to contact the IOCCC web page.

+

NOTICE: If you wish to discuss a possible vulnerability with +the mkiocccentry GitHub repo +or any of the mkiocccentry tools:

+ +

Please report any possible mkiocccentry vulnerability using the +mkiocccentry security advisory +interface +instead.

+

Important Disclaimer

+

IOCCC code is for educational and entertainment purposes only. We do NOT recommend installing any winning IOCCC entry code. Use code found the IOCCC repo and in the IOCCC web site at your own risk!

+

The IOCCC and the IOCCC judges DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THEY BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

diff --git a/SECURITY.md b/SECURITY.md index dd2ac07ab..8f86dd60d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,10 +1,12 @@ # Security Policy + ## Supported Versions -**ALL CODE IN ALL IOCCC ENTRIES IS UNSUPPORTED!!** +**ALL IOCCC ENTRY CODE IS UNSUPPORTED!!** + +We will **NOT** provide security updates to any IOCCC entry code! -Use code in this repo at your own risk! We will **NOT** provide security updates to any IOCCC entry code! ## Reporting a Vulnerability @@ -12,6 +14,26 @@ Even though **ALL IOCCC ENTRY CODE IS UNSUPPORTED**, if you wish to discuss a security concern regarding this repo then please **send email the IOCCC judges** by consulting the bottom section of the [How to contact the IOCCC](https://www.ioccc.org/contact.html) web page. -If, on the other hand, you wish to discuss a possible vulnerability in the -[mkiocccentry repo](https://github.com/ioccc-src/mkiocccentry) then please [report it -here](https://github.com/ioccc-src/mkiocccentry/security/advisories/new). + +**NOTICE**: If you wish to discuss a possible vulnerability with +the [mkiocccentry GitHub repo](https://github.com/ioccc-src/mkiocccentry) +or any of the `mkiocccentry tools`: + +* `chkentry(1)` +* `fnamechk(1)` +* `iocccsize(1)` +* `mkiocccentry(1)` +* `txzchk(1)` +* etc. + +Please report any possible mkiocccentry vulnerability using the +[mkiocccentry security advisory +interface](https://github.com/ioccc-src/mkiocccentry/security/advisories/new) +instead. + + +# Important Disclaimer + +IOCCC code is for **educational and entertainment purposes only**. We do **NOT** recommend installing any winning IOCCC entry code. Use code found the IOCCC repo and in the IOCCC web site **at your own risk!** + +The [IOCCC](index.html) and the [IOCCC judges](judges.html) DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THEY BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. diff --git a/bin/md2html.cfg b/bin/md2html.cfg index f0bce6011..e585972d0 100644 --- a/bin/md2html.cfg +++ b/bin/md2html.cfg @@ -227,23 +227,6 @@ index.md -D ./ -SECURITY.md - -H - navbar=empty - -o - bin/subst.default.sh - -s - TITLE=The International Obfuscated C Code Contest - -s - DESCRIPTION=International Obfuscated C Code Contest - Security Policy - -s - KEYWORDS=Security - -H - header=no-header-2 - -D - ./ - - judges.md -H navbar=empty @@ -390,6 +373,22 @@ nojs-menu.md -D ./ +SECURITY.md + -H + navbar=empty + -o + bin/subst.default.sh + -s + TITLE=The International Obfuscated C Code Contest + -s + DESCRIPTION=International security policy + -s + KEYWORDS=IOCCC, security, security policy + -s + HEADER_2=IOCCC Security Policy + -D + ./ + status.md -H navbar=empty diff --git a/index.html b/index.html index e680498dc..7592e2a3a 100644 --- a/index.html +++ b/index.html @@ -435,6 +435,9 @@ plaintext menu even with JavaScript enabled, you can do so

Entering the Contest

View the current status of the IOCCC to see of the IOCCC is open for submissions.

See the FAQ about how to enter the IOCCC for more information.

+

Important Disclaimer

+

IOCCC code is for educational and entertainment purposes only. We do NOT recommend installing any winning IOCCC entry code. Use code found the IOCCC repo and in the IOCCC web site at your own risk!

+

The IOCCC and the IOCCC judges DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THEY BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.