Thoughts dereferenced from the scratchpad noise.

Latest posts


The Dasharo Path to HSI-3

Published at November 27, 2025 · Sergii Dmytruk ·  20 min read

Dasharo on MeteorLake NovaCustom laptops has reached HSI-3. This took extending support for Intel BootGuard in coreboot and combining TPM event logs of coreboot and EDK II....

Categories: firmware security

Dasharo Tools Suite: the story about scalability and stability, roadmap

Published at November 24, 2025 · Daniil Klimuk ·  33 min read

Check out latest DTS upatest and roadmap. I will start from intro to DTS and the feature that are coming to it: hardware attestation, Chain of Trust and Root of Trust provisioning and verification, new hardware support. Then the brand new DTS E2E testing methodology, that help us maintain and further develop DTS, will be introduced and explained in details....

Categories: app-dev firmware miscellaneous os-dev

Context-Based Auth.: Identify host by environment

Published at October 24, 2025 · Mateusz Kusiak ·  13 min read

Geofencing - a mechanism that allows limiting various types of access to a specific area. To do so, often GPS or cellular information utilized. The issue is, stationary computers and laptops often lack needed hardware. …but what if we could use just the wifi-chips embedded in those devices to achieve even more secure result?...

Categories: iot miscellaneous security

Qubes OS Summit 2025 in Berlin: From R4.3 Features to Qubes Air Architecture

Published at October 20, 2025 · Piotr Król ·  22 min read

Qubes OS Summit 2025 took place September 26-28 in Berlin, bringing together the community for talks on R4.3 updates, GUI improvements, infrastructure advances, and Qubes Air architecture. The event featured contributions from the Dasharo ecosystem including server firmware foundations, NovaCustom updates, UEFI Secure Boot progress, and TrenchBoot compatibility work. Day three hackathon focused on practical implementation including the Dasharo Patchqueue Initiative with XenServer expertise....

Categories: firmware os-dev security