Thoughts dereferenced from the scratchpad noise.

Latest posts


Context-Based Auth.: Identify host by environment

Published at October 24, 2025 · Mateusz Kusiak ·  13 min read

Geofencing - a mechanism that allows limiting various types of access to a specific area. To do so, often GPS or cellular information utilized. The issue is, stationary computers and laptops often lack needed hardware. …but what if we could use just the wifi-chips embedded in those devices to achieve even more secure result?...

Categories: iot miscellaneous security

Qubes OS Summit 2025 in Berlin: From R4.3 Features to Qubes Air Architecture

Published at October 20, 2025 · Piotr Król ·  22 min read

Qubes OS Summit 2025 took place September 26-28 in Berlin, bringing together the community for talks on R4.3 updates, GUI improvements, infrastructure advances, and Qubes Air architecture. The event featured contributions from the Dasharo ecosystem including server firmware foundations, NovaCustom updates, UEFI Secure Boot progress, and TrenchBoot compatibility work. Day three hackathon focused on practical implementation including the Dasharo Patchqueue Initiative with XenServer expertise....

Categories: firmware os-dev security

ram-wipe: Further analysis

Published at August 27, 2025 · Kamil Aronowski ·  12 min read

The `init_on_free` Linux option ensures rigorous security by instantly zeroing out memory upon deallocation. In this follow-up, we build on our prior ram-wipe experiments to rigorously evaluate if `init_on_free` can serve as a robust safeguard, perhaps supplanting existing, less comprehensive memory wiping solutions....

Categories: firmware security