duffyduck
0 Followers · 0 Following
  • Joined on 2024-03-24
Repositories
2
 Projects Packages Public Activity Starred Repositories
duffyduck pushed to main at Hacker-Software/docker-podman-installation-wit… 2026-08-20 08:36:17 +00:00
b4956f780f .env .gitignore
duffyduck created branch main in Hacker-Software/docker-podman-installation-wit… 2026-08-20 08:34:16 +00:00
duffyduck pushed to main at Hacker-Software/docker-podman-installation-wit… 2026-08-20 08:34:16 +00:00
75fba0229a first commit
duffyduck created repository Hacker-Software/docker-podman-installation-wit… 2026-08-20 08:33:13 +00:00
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 20:14:43 +00:00
2932598c98 Bestandssiegel: Altbestand gegen stille Aenderung gesichert (Pentest R171-02)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 19:45:36 +00:00
2b0af772a2 Manifest-Kanal abgesichert (Pentest R171-01 HIGH, R171-03 LOW)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 19:17:23 +00:00
32c9efacda rehash/cleanup: Vorzustand sichern + Bestaetigung verlangen (Pentest R170-01)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 18:18:32 +00:00
791711ca58 Refresh-Kulanz idempotent: stiller Session-Fork geschlossen (Pentest R168-01)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 17:47:07 +00:00
655d20db23 .env.example: Caddy-Standard "aus" unmissverstaendlich gemacht
ffeb4dbfd8 Caddy per Schalter in der .env statt per CLI-Flag
22501f4650 Nur noch eine docker-compose.yml und eine .env
ee83b09ed8 Caddy-Stack (docker/) auf Stand gebracht statt entfernt
0ae6b13d6c Audit-Siegel: Schluessel erreicht jetzt tatsaechlich den Container
Compare 7 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 17:20:02 +00:00
fb0915df12 Audit-Siegel: Umstiegsweg dokumentiert + Rotations-Fussangel entschaerft
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 17:07:44 +00:00
93cb5ffd27 Doku: Audit-Siegel (AUDIT_HMAC_KEY) verstaendlich erklaert
9fcab6f17e Refresh-Token: Replay-Schutz mit Familien-Widerruf (Pentest R164-02)
Compare 2 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 16:56:48 +00:00
044a12f73e Externer Anker: Audit-Kette HMAC-signiert (Hash-Version 3)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 16:40:40 +00:00
1a349d142e hashVersion-Downgrade geschlossen (Pentest R167-01, HIGH)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 15:48:34 +00:00
f2a4baacdb Audit-Haerten: Fork, Feldabdeckung, Refresh-Rauschen, Route (Pentest R166)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-19 09:32:32 +00:00
c7d6b6de7e Audit-Pruefung: "manipuliert" von "Luecke" getrennt + Retention fuer Routine-Auth
477a850a91 Audit-Kette: Race beim Fortschreiben behoben (parallele Requests)
89ae7b73a1 Audit-Integritaet: Dauer-Fehlalarm ueber 67 % des Logs behoben
ad520e20a7 Audit-Log: Pfad-Matching im finish-Handler gefixt (Pentest R165-01)
Compare 4 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-18 16:21:44 +00:00
d599eb3702 Refresh-Fehlschlag: Detection-Gap geschlossen (Pentest R164-01)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-18 15:52:10 +00:00
de0d6bd817 Audit-Log: stiller Token-Refresh entrauscht (eigene Action TOKEN_REFRESH)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-18 14:52:00 +00:00
7bdb885a10 Mass-Assignment-Schutz: Nested-Vertragsdetails (Pentest R162-01)
duffyduck pushed to main at Hacker-Software/opencrm 2026-08-18 12:26:50 +00:00
8964820542 Kunde-E-Mail: Pflicht nur beim Anlegen, nicht beim Bearbeiten
15142676ef Aufgaben ohne Kunde/Vertrag anlegbar
b8128616f2 Kunde: E-Mail Pflichtfeld + keine verwaltete Provider-Domain erlaubt
db4b9edd13 Energievertrag: Ankreuzfeld "Keine Bonis erwuenscht"
Compare 4 commits »
duffyduck released v0.0.3.3 at Hacker-Software/starface-outlook-sync-addin 2026-08-17 12:16:57 +00:00