Tag - security

Entries feed

25 Mar 2015

Security vulnerability found and patched in the Cozy platform. Update your self-hosted instance!

Intro picture

The Cozy controller starts each application with its own Linux user. When an application was launched, the controller used the proper Uid with a gid equal to zero (root group). Therefore, the application could access files that where supposed to be read only by the root group.

Continue reading

28 Jan 2015

Paul Joins the Cozy Crew

When you build software, most of the time you want to deliver quickly. But some subjects require patience and time. Secure data sharing is one of them. We think the future of Cozy will rely a lot on social features. Because we are concerned by the security, we decided to reach researchers in that field.

Continue reading