Hackers often attack secure boot during the boot process to execute unauthorized code, which gives them the ability to bypass a system’s security measures. By compromising Secure Boot, they can install rootkits and malware at a low level, gaining persistent control over the system and evading traditional security defenses. The Binarly Research Team discovered a significant supply chain security…

Cryptography Without Using Secret Keys

Most security applications, for instance access to buildings or digital signatures, use cryptographic keys that must at all costs be kept secret. That also is the weak link: who will guarantee that the key doesn’t get stolen or hacked? Using a physical unclonable key (PUK) – which can be a stroke of white paint on a surface – and the quantum properties of light, researchers of the University of…

A Tale of Mystery, Intrigue, And The Lava Lamp

New monetization opportunities for the IoT

Steven Woo, VP of Solutions Marketing at Rambus, recently participated in an Internet of Things (IoT) Summit panel discussion about the creation of new monetization opportunities in the burgeoning space.

As Woo noted, chip design projects that once cost a few tens of millions of dollars a decade ago have jumped to $200 million or more. In addition, a significant increase in the number of IP…

There is no giant Faraday cage for the IoT

A Faraday cage or Faraday shield can best be defined as an enclosure formed by conductive material that is used to block electric fields. As such, Faraday cages either heavily attenuate or block the reception and transmission of radio waves, which are a form of electromagnetic radiation.

Image Credit: Frank Vincentz (Via Wikipedia)

Unfortunately, there is no Faraday cage large enough to shield…

Side-channel attacks target Mr. Robot

This past summer, Engadget’s Violet Blue compiled a list of the top Mr. Robot hacks. These include deanonymizing Tor traffic, the installation of an Android rootkit, compromising an HVAC system using a Raspberry Pi, Bluetooth and text message spoofing, as well as the deployment of a keystroke-injection attack tool.

Episode 5, “3xpl0its.wmv,” which aired on July 22nd, 2015, also featured…

LG Electronics licenses Rambus CryptoManager security platform

LG Electronics (LGE) has licensed Rambus’ CryptoManager security platform for its next generation of mobile devices. The versatile platform will provide LGE with a robust security solution, which includes a hardware-based root-of-trust for the provisioning of keys to manage sensitive data on mobile devices.

“At LGE, we are committed to ensuring that security is a key component of our…