Making an Orbic Speed RC400L autoboot when USB power is attached

On-device WebAuthn and what makes it hard to do well

Trying to remove the need to trust cloud providers

Cloud desktops aren't as good as you'd think

Bring Your Own Disaster

Handling WebAuthn over remote SSH connections

Responsible stewardship of the UEFI Secure Boot ecosystem

Lenovo shipping new laptops that only boot Windows by default

Can we fix bearer tokens?

Bearer tokens are just awful

The Freedom Phone is not great at privacy

Zero Trust Architecture doesn't solve all problems, but partial ZTA solves fewer

AMD's Pluton implementation seems to be controllable

More Doorbell Adventures

Pluton is not (currently) a threat to software freedom

Boot Guard and PSB have user-hostile defaults

Update on Linux hibernation support when lockdown is enabled

Does free software benefit from ML models being derived works of training data?

Producing a trustworthy x86-based Linux appliance

More doorbell adventures

An accidental bootsplash

Unauthenticated MQTT endpoints on Linksys Velop routers enable local DoS

Exploring my doorbell

Making hibernation work under Linux Lockdown

Filesystem deduplication is a sidechannel

Linux kernel lockdown, integrity, and confidentiality

Implementing support for advanced DPTF policy in Linux

What usage restrictions can we place in a free software license?

Avoiding gaps in IOMMU protection at boot

WiFi deauthentication attacks and home security

More →