Stuart Yoder explains why standard assessment tools like #LFVS, #HSI, and #CHIPSEC struggle on #ARM systems, where diverse hardware designs make direct inspection unreliable. The lack of consistent, inspectable security primitives leaves significant blind spots for teams trying to validate platform security.

🔗 Video, description & slides:
https://cfp.3mdeb.com/developers-vpub-0xc-2024/talk/RMEWFV/

Security assessment on Arm platforms Developers vPub 0xC

Security assessment tooling such as LFVS HSI and Chipsec rely on standard security mechanisms that can be directly inspected by a tool. Due to the diversity of Arm-based hardware platforms doing direct inspection is difficult. This presentation discusses work underway to evaluate how security assessment could be done on Arm platforms and work towards a solution.

Added an update to the #blog entry on how I found out that a BIOS upgrade erased my enrolled MOK key 😬 and how DBX entries get pushed to GNU/Linux systems via the #linuxfoundation and #lfvs

https://blog.lazy-evaluation.net/posts/linux/switching-to-secureboot.html

Switching on Secure Boot in Debian

My main desktop machine is an AMD Ryzen-2400G on an ASUS PRIME B350M-A motherboard. It came with secure boot disabled and as the first action I installed Debian on it. Back in early 2019, Debian 10

Dzu's Blog

Been thinking to get a USB fingerprint reader for a mini desktop PC I have running Fedora 38. Any recommendations?

#linux #lfvs #biometric #authentication

Flatpak updates and firmware updates in GNOME Software. Thanks, #LFVS!