Collaborate Disseminate
I’m working on a Linux powered consumer electronics. Everything user interacts with is running as root (legacy design). Should I make the application run as its own user with restrictions?
Continue reading Embedded system – is it a good idea to run the user application as root?
In the context of safety-critical systems, such as transportation systems, it is important to verify if such systems meet/do not meet safety requirements.
ISO26262 expresses these requirements as a maximum number of failures… Continue reading How does a security countermeasure failure impact a system?
Today I analyzed my home router.
I connected a keyboard to the router’s USB port, which is usually used for mass storage devices.
However, I pressed the key combination to reboot a Linux system from TTY (<Ctrl>-<Alt… Continue reading Deactivate Linux Shell to prevent "blind" login on router
Today I analyzed my home router.
I connected a keyboard to the router’s USB port, which is usually used for mass storage devices.
However, I pressed the key combination to reboot a Linux system from TTY (<Ctrl>-<Alt… Continue reading Deactivate Linux Shell to prevent "blind" login on router
Operating Systems and Embedded Systems usually don’t come with source code or binaries that one can review.
How can a vulnerability researcher look for flaws in a system (Architecture, Protocols, etc.) without any access to … Continue reading How can vulnerability researchers find flaws in OSes / Embedded Systems?
I am trying to get mbedtls RSA to work on x86. I have test data obtained from an online RSA calculator, and I want to feed raw memory into RSA to encrypt the data.
I am making the following calls:
// verified no errors by s… Continue reading How does mbedtls RSA work when using raw keys and input for PK encryption?
I am working on a piece of software with cyber security features for an embedded system written in C.
If:
I do not use HSM/SHE
Store certificate and key information on the Flash/EEPROM somewhere within a software componen… Continue reading Cyber security on an embedded system [on hold]
I’m looking to secure communications for a statically configured system. Each device is a microcontroller that has access to secret storage (TPM, etc.). There is no centralization of data for the system: every device is a p… Continue reading Using DTLS for Distributed Peer-to-Peer Communications
I have a hardware device, which collects data. It should then encrypt the data, and send it to a server, which should decrypt the data.
The device is an embedded system which can be programmed only once (during manufacture),… Continue reading Individual public keys for embedded devices?
I am trying to understand the difference between the TEE (Trusted Execution Environment) and REE (Rich Execution Environment) in an electronic component. I understand that for security reasons, there is a TEE environment. I w… Continue reading How applications are installed in TEE and REE