Social 📸 Photography

Pen Test Partners🔧 Right to repair, but not to fix security?Framework’s philosophy empowers users to open, upgrade, and repair their devices. But with great openness comes a security catch.On the Framework 13, pressing the chassis intrusion switch 10 times resets the BIOS, removing passwords, Secure Boot, and more.We flagged this to Framework. Their response? "It's a feature..."That’s risky. This reset might help with recovery, but it also hands an attacker physical access to critical settings.Kieran explains the issue, what this means for security, and how to protect your device.📌Read here: <a href="https://www.pentestpartners.com/security-blog/framework-13-press-here-to-pwn/" rel="nofollow noopener" translate="no" target="_blank">https://www.pentestpartners.com/security-blog/framework-13-press-here-to-pwn/</a><a href="https://infosec.exchange/tags/RightToRepair" class="mention hashtag" rel="nofollow noopener" target="_blank">#RightToRepair</a> <a href="https://infosec.exchange/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a> <a href="https://infosec.exchange/tags/FrameworkLaptop" class="mention hashtag" rel="nofollow noopener" target="_blank">#FrameworkLaptop</a> <a href="https://infosec.exchange/tags/BIOSReset" class="mention hashtag" rel="nofollow noopener" target="_blank">#BIOSReset</a> <a href="https://infosec.exchange/tags/SecurityByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityByDesign</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a>

David Chisnall (*Now with 50% more sarcasm!*)The <a href="https://infosec.exchange/@cheri_alliance" class="u-url mention" rel="nofollow noopener" target="_blank">@cheri_alliance</a> has around a thousand followers on LinkedIn and just joined the Fediverse today. Let’s see how quickly we can get them to more than that here!<a href="https://infosec.exchange/tags/CHERI" class="mention hashtag" rel="nofollow noopener" target="_blank">#CHERI</a> <a href="https://infosec.exchange/tags/MemorySafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#MemorySafety</a> <a href="https://infosec.exchange/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a> <a href="https://infosec.exchange/tags/FollowFriday" class="mention hashtag" rel="nofollow noopener" target="_blank">#FollowFriday</a>

CHERI Alliance👋 Hey infosec.exchange! We’re the CHERI Alliance — excited to join the community!🔐 We’re all about CHERI (Capability Hardware Enhanced RISC Instructions) — a powerful hardware-based approach to making memory safety and software security actually enforceable, by design.💡 CHERI helps stop things like buffer overflows and use-after-free bugs before they cause trouble — with hardware-enforced protections built right into the architecture.We’re here to: - Share news about the CHERI community in general - Talk about what our members are building with CHERI - Connect with folks who care about deep, meaningful security improvements Check us out 👉 cherialliance.orgGive us a follow if this sounds like your kind of thing!<a href="https://infosec.exchange/tags/CHERI" class="mention hashtag" rel="nofollow noopener" target="_blank">#CHERI</a> <a href="https://infosec.exchange/tags/MemorySafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#MemorySafety</a> <a href="https://infosec.exchange/tags/SecureByDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecureByDesign</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a>

Seth G.Has anyone done a proper <a href="https://chaos.social/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a> analysis on the <a href="https://chaos.social/tags/Fairphone" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fairphone</a> yet? I know <a href="https://grapheneos.social/@GrapheneOS" class="u-url mention" rel="nofollow noopener" target="_blank">@GrapheneOS</a> has said, "it doesn't meet their requirements" (fair enough), but what about for the OEM-installed <a href="https://chaos.social/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> ROM?<a href="https://chaos.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://chaos.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a>

Privacy GuidesAlways remember, when it comes to hardware security keys: Two is one, one is none.Our latest article covers the setup process for two YubiKeys (from Yubico's YubiKey 4 or 5 series) to keep your online accounts safe and secure 🔒 + it goes through resetting your existing keys to a blank slate, and the reasons you might want to do so!<a href="https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/" rel="nofollow noopener" translate="no" target="_blank">https://www.privacyguides.org/articles/2025/03/06/yubikey-reset-and-backup/</a><a href="https://mastodon.neat.computer/tags/YubiKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#YubiKey</a> <a href="https://mastodon.neat.computer/tags/HardwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#HardwareSecurity</a> <a href="https://mastodon.neat.computer/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mastodon.neat.computer/tags/Yubico" class="mention hashtag" rel="nofollow noopener" target="_blank">#Yubico</a> <a href="https://mastodon.neat.computer/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.neat.computer/tags/PrivacyGuides" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacyGuides</a> <a href="https://mastodon.neat.computer/tags/Article" class="mention hashtag" rel="nofollow noopener" target="_blank">#Article</a>

Chris GammellI chatted with the embedded team at Raspberry Pi about the <a href="https://chaos.social/tags/RP2350" class="mention hashtag" rel="nofollow noopener" target="_blank">#RP2350</a> on The Amp Hour. It's an amazing "dual dual-core" part that is finding its way into many products. We chatted <a href="https://chaos.social/tags/hardwaresecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#hardwaresecurity</a> and <a href="https://chaos.social/tags/lowpower" class="mention hashtag" rel="nofollow noopener" target="_blank">#lowpower</a>, as those were key enhancements over the <a href="https://chaos.social/tags/RP2040" class="mention hashtag" rel="nofollow noopener" target="_blank">#RP2040</a>. <a href="https://theamphour.com/687-the-rp2350-with-the-raspberry-pi-team/" rel="nofollow noopener" translate="no" target="_blank">https://theamphour.com/687-the-rp2350-with-the-raspberry-pi-team/</a>

⚜ Ån̶t̶hiǝ¯₣ab̷r̷ε ⚜ ☮️RT @helpnetsecurity@twitter.comUSB armory Mk II: A secure computer on a USB stick featuring open source hardware design - <a href="https://www.helpnetsecurity.com/2020/02/05/usb-armory-mk-ii/" rel="nofollow noopener" target="_blank">https://www.helpnetsecurity.com/2020/02/05/usb-armory-mk-ii/</a> - @FSecure@twitter.com <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> @AndreaBarisani@twitter.com <a href="https://mastodon.social/tags/securitynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#securitynews</a> <a href="https://mastodon.social/tags/hardwaresecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#hardwaresecurity</a> <a href="https://mastodon.social/tags/cybersecuritynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecuritynews</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a>🐦🔗: <a href="https://twitter.com/helpnetsecurity/status/1224996246445862912" rel="nofollow noopener" target="_blank">https://twitter.com/helpnetsecurity/status/1224996246445862912</a>

Recent searches

Search options

Administered by:

Server stats:

#hardwaresecurity