Quiz — Integrity Failures
10 APPLY questions on A08 updates, digests, and deser refuse.
A08 Software or Data Integrity Failures — Module Quiz
Ten APPLY items on OWASP Top 10:2025 A08 as Cyberlium taught it: unsigned updates and CI trust; digests vs signatures; pins; deserialization as unsafe object reconstruction — refuse/replace on YOUR code with no gadget cookbooks; integrity-lab.txt under $HOME/cyberlium-lab mode 600; sha256sum of local artifacts plus curl -sS -I http://192.168.0.1/. Router admin login at that IP is OUT OF SCOPE. Registry poison, foreign CI attacks, ysoserial labs, hydra, LAN nmap, and malware samples are failing answers. Original Cyberlium — not official OWASP certification. Next: A09 What Must Be Logged.
APPLY: HTTPS auto-update without signature/digest check. A08?
APPLY: True or False: Fork PRs should get production deploy secrets.
APPLY: Hash mismatch on a release zip. Action?
APPLY: Hash alone proves vendor authorship?
APPLY: curl -I of http://192.168.0.1/ shows a TP-Link/Netgear/Huawei “Router Admin” login. What is in scope?
APPLY: Teammate wants ysoserial against the dorm API for A08. Response?
APPLY: True or False: Signing a pickle makes public pickle.loads a good API.
APPLY: integrity-lab.txt blank except “secure.” Pass?
APPLY: Path vs OWASP?
APPLY: Next module and still refused?