Bring Your Own Disaster

Handling WebAuthn over remote SSH connections

Responsible stewardship of the UEFI Secure Boot ecosystem

Lenovo shipping new laptops that only boot Windows by default

Can we fix bearer tokens?

Bearer tokens are just awful

The Freedom Phone is not great at privacy

Zero Trust Architecture doesn't solve all problems, but partial ZTA solves fewer

AMD's Pluton implementation seems to be controllable

More Doorbell Adventures

Pluton is not (currently) a threat to software freedom

Boot Guard and PSB have user-hostile defaults

Update on Linux hibernation support when lockdown is enabled

Does free software benefit from ML models being derived works of training data?

Producing a trustworthy x86-based Linux appliance

More doorbell adventures

An accidental bootsplash

Unauthenticated MQTT endpoints on Linksys Velop routers enable local DoS

Exploring my doorbell

Making hibernation work under Linux Lockdown

Filesystem deduplication is a sidechannel

Linux kernel lockdown, integrity, and confidentiality

Implementing support for advanced DPTF policy in Linux

What usage restrictions can we place in a free software license?

Avoiding gaps in IOMMU protection at boot

WiFi deauthentication attacks and home security

Extending proprietary PC embedded controller firmware

Letting Birds scooters fly free

Do we need to rethink what free software is?

It's time to talk about post-RMS Free Software

More →