The history of Deepin code reviews clearly shows that upstream is lacking security culture
As somebody that doesn't write code for a living (i manage infrastructure)... besides common sense, where would one start looking in order to learn "security culture" ?
Comments
As somebody that doesn't write code for a living (i manage infrastructure)... besides common sense, where would one start looking in order to learn "security culture" ?
Since you mention infrastructure,
https://www.fortinet.com/resources/cyberglossary/shift-left-...
Follow up reading CIS and related reasonings.
https://www.cisecurity.org/cis-benchmarks
There are also some Linux Plumers, NDC and Devvoxx talks on security.