Tips for auditing/finding a better/trusted source for an anonymous but open source network device linux driver from some random github repo

Maybe because I am a cheap bastard or just because I saw no better alternative in the market in terms of reported performance and functionality vs. size, I bought this USB bluetooth/WiFi5 dongle:
https://www.amazon.nl/XVZ-bluetooth-600mbps… Continue reading Tips for auditing/finding a better/trusted source for an anonymous but open source network device linux driver from some random github repo

How to execute Android verified boot during first boot after updating OS in Android?

I need to execute AVB (Android verified boot) during first boot after updating Android OS. BOARD_AVB_ENABLE = true is already present in the mk file device/hikey/common/BoardConfigCommon.mk in the external/AVB folder.
I want to know how to… Continue reading How to execute Android verified boot during first boot after updating OS in Android?

How to completely restrict Steam in Linux to defend against remote zero day exploits?

My question is, how can i completely restrict Steam’s processes and modules to only have access to what they suppose to, and not be able to do anything malicious, for example running bin/sh or accessing files that it shouldn’t?
Basically, … Continue reading How to completely restrict Steam in Linux to defend against remote zero day exploits?

Is W^X enforced against UEFI DXE drivers (firmware)? Could it be if we tried?

W^X is a critical security feature, allowing us a chance to perform security analysis on data that some entity on a computer wants to execute.
Windows implements this by requiring a process to call VirtualProtect. Because UEFI rootkits are… Continue reading Is W^X enforced against UEFI DXE drivers (firmware)? Could it be if we tried?