Skip to content

Commit

Permalink
Cleanup Why Our Work Matters experiment
Browse files Browse the repository at this point in the history
  • Loading branch information
martendegroot committed Jan 6, 2025
1 parent 21e718f commit 24a494d
Show file tree
Hide file tree
Showing 17 changed files with 2 additions and 314 deletions.
67 changes: 0 additions & 67 deletions content/why-our-work-matters/_index.en.md
Original file line number Diff line number Diff line change
@@ -1,69 +1,4 @@
---
sections:
- title: DIVD’s work is of great importance, here is why
text: This page explains why our work matters to society, partners, and other organizations.
type: titleText
- text: |-
## DIVD scans the entire internet
#### **Traditional methods, like penetration tests, often focus on a specific scope, usually limited to an organization’s IP addresses or URLs.  In contrast, DIVD seeks to identify all systems with a particular vulnerability, often discovering issues in systems that organizations were unaware they had.**
**DIVD takes this a step further.**
Because we work for the common good and adhere to guidelines for ethical hacking, we extend our reach beyond the limits imposed on governments or commercial security companies. This allows us to determine with greater certainty whether a system is vulnerable. An email notification from DIVD always indicates a vulnerability that needs immediate attention.
**DIVD scans for both regular security vulnerabilities and zero-day vulnerabilities.**
DIVD independently assigns new unique identifiers (CVEs) when new (previously unknown) vulnerabilities are identified by its researchers.
**DIVD is known for its transparency & collaboration.**
DIVD is recognized for its transparent approach in reporting vulnerabilities and the actions taken to resolve them. This level of openness fosters trust within both the cybersecurity community and the general public. We promote ethical hacking and responsible disclosure while striving to tackle broader cybersecurity challenges. Unlike many cybersecurity organizations, DIVD is a non-profit entity, run by volunteers.
**DIVD actively engages with the cybersecurity community, including researchers, ethical hackers, and other stakeholders, to share knowledge and improve collective security efforts.**
type: paper
hasBackground: true
- text: |-
## What happens when we find a vulnerability? Here’s an example.
A good example of what the world would look like without DIVD’s efforts is the SolarMan case. In 2022, a DIVD researcher found a GitHub repository containing the username and password for SolarMan’s Super Admin account. These credentials were visible to anyone who would visit the GitHub page, meaning that anyone in the world with internet access could have gained unauthorized access to nearly 1,000,000 installations.
type: doubleDecker
- text: |-
## SolarMan’s Password Oopsie
How 1 million installations almost went dark
The 1,000,000 installations refer to solar power plants (installations) managed through the SolarMan platform. These installations have a total power output of over 10GwP (gigawatts peak). Most of these systems are located in China and Australia, with a significant number of over 40,000 in The Netherlands.
DIVD contacted the company responsible for the repository. Eventually, the exposed password was reset and the repository was deleted. But what if the vulnerability hadn’t been discovered and the credentials remained publicly available?
Cybercriminals could theoretically have been able to gain access to the SolarMan Super Admin account, potentially controlling nearly 1,000,000 installations. They could theoretically have had the ability to alter system settings, disrupt services, or disable installations, causing widespread operational issues.
Sensitive information could potentially have been exposed, leading to data breaches. Compromised systems could theoretically have been used to deploy malware, resulting in further security incidents and potential damage to connected networks.
**The company’s reputation could have been severely damaged, resulting in a loss of trust from customers and partners.**
type: paper
hasBackground: false
- button:
label: Go to csirt website
url: something I don't know
external: false
text: Note that it is very complex to summarize any DIVD case, or make accurate and precise assumptions about which risks were specifically mitigated. If you have any questions, please read about our case on the CSIRT
type: pill
- rightArticle:
button:
label: Read more
url: moar
external: false
category: Culture
title: Microsoft update makes Outlook very vulnerable
text: Lorem ipsum dolor sit amet consectetur. Ultricies faucibus sit sit ante vestibulum dictum venenatis commodo.
leftArticle:
button:
label: Read more
url: moar
external: false
category: Culture
title: Our yearly get-together was a great succes!
text: Lorem ipsum dolor sit amet consectetur. Ultricies faucibus sit sit ante vestibulum dictum venenatis commodo.
title: Suggested Articles
type: suggestedArticles
title: Our work is of great importance, here is why
intro: |-
This page explains why our work matters to society, partners, and other organisations.
Expand Down Expand Up @@ -127,8 +62,6 @@ casehighlight:
- [Official answers of ministers Yesilgöz-Zegeriu and Jetten to the question of Dutch representatives Queeny Rajkowski and Silvio Erkens](https://www.tweedekamer.nl/kamerstukken/kamervragen/detail?id=2022Z15333&did=2022D31877)
**Note that it is very complex to summarize any DIVD case, or make accurate and precise assumptions about which risks were specifically mitigated. If you have any questions, please read about our case on the CSIRT page and [contact DIVD](https://www.divd.nl/contact/).*
main:
title: More text here
---

**DIVD scans the entire internet.**
Expand Down
17 changes: 0 additions & 17 deletions layouts/partials/components/card-horizontal/card-horizontal.html

This file was deleted.

28 changes: 0 additions & 28 deletions layouts/partials/components/card-horizontal/index.ts

This file was deleted.

17 changes: 0 additions & 17 deletions layouts/partials/sections/double-decker/double-decker.html

This file was deleted.

14 changes: 0 additions & 14 deletions layouts/partials/sections/double-decker/index.ts

This file was deleted.

8 changes: 1 addition & 7 deletions layouts/partials/sections/index.ts
Original file line number Diff line number Diff line change
@@ -1,9 +1,3 @@
import { DoubleDecker } from './double-decker';
import { Faq } from './faq';
import { Paper } from './paper';
import { Pill } from './pill';
import { SuggestedArticles } from './suggested-articles';
import { TitleText } from './title-text';

export const sections = [DoubleDecker, Paper, Pill, SuggestedArticles, TitleText, Faq];
export const articleSections = [SuggestedArticles, Faq];
export const articleSections = [Faq];
21 changes: 0 additions & 21 deletions layouts/partials/sections/paper/index.ts

This file was deleted.

15 changes: 0 additions & 15 deletions layouts/partials/sections/paper/paper.html

This file was deleted.

17 changes: 0 additions & 17 deletions layouts/partials/sections/pill/index.ts

This file was deleted.

11 changes: 0 additions & 11 deletions layouts/partials/sections/pill/pill.html

This file was deleted.

12 changes: 1 addition & 11 deletions layouts/partials/sections/sections.html
Original file line number Diff line number Diff line change
@@ -1,15 +1,5 @@
{{ range .Params.sections }}
{{ if eq .type "doubleDecker" }}
{{ partial "sections/double-decker/double-decker" . }}
{{ else if eq .type "paper" }}
{{ partial "sections/paper/paper" . }}
{{ else if eq .type "pill" }}
{{ partial "sections/pill/pill" . }}
{{ else if eq .type "suggestedArticles" }}
{{ partial "sections/suggested-articles/suggested-articles" . }}
{{ else if eq .type "titleText" }}
{{ partial "sections/title-text/title-text" . }}
{{ else if eq .type "faq" }}
{{ if eq .type "faq" }}
{{ partial "sections/faq/faq" . }}
{{ end }}
{{ end }}
19 changes: 0 additions & 19 deletions layouts/partials/sections/suggested-articles/index.ts

This file was deleted.

This file was deleted.

24 changes: 0 additions & 24 deletions layouts/partials/sections/title-text/index.ts

This file was deleted.

10 changes: 0 additions & 10 deletions layouts/partials/sections/title-text/title-text.html

This file was deleted.

19 changes: 0 additions & 19 deletions layouts/why-our-work-matters/index.ts

This file was deleted.

8 changes: 0 additions & 8 deletions layouts/why-our-work-matters/section.html

This file was deleted.

0 comments on commit 24a494d

Please sign in to comment.