Happy Veteran’s Day y’all. Read More
Featured
Veterans Day 2021
Featured
Toorcon: San Beagle eCTF
CTF at Toorcon is next week! Check it out at advsec.io/ctf. Read More
Featured
Season 1 Episode 4 of Bytes, Boards, and Books
In this video, I go over my favorite and not-so-favorite RISCV dev boards and RISCV books. Not surprisingly, the best boards IMHO are coming from SiFive right now. Read More
Featured
Josh Will Be Featured on the Microchip Shields Up! Series
SHIELDS UP! Season 2 Episode 2 with Cryptotronix CEO Josh Datko is scheduled on September 22nd at 8:00 a.m. PDT. He will share how his consulting firm starts with a threat model discussion and how they help strengthen trust on non-TLS networks. https://mchp.us/3BGDbHY Read More
Featured
Security Logging and Monitoring in the IoT
Insufficient logging and monitoring have been on the OWASP Top 10 for some time now, but is this applicable to IoT deployments as well as web apps? Read More
Featured
Sniffing TPM Buses: All the Kids Are Doing it Now
A few weeks ago there was a blog post about sniffing the SPI bus that had a TPM to decrypt a bit locker-encrypted laptop. Reactions ranged the typical response on the classic watering holes. Read More
Featured
Advanced Security Intro to Hardware Hacking and Reverse Engineering Preview
In this video Josh gives a small taste of what you can expect in the Introduction to Hardware Hacking and Reverse Engineer Course at Advanced Security. Specifically, he shows the run-time interpreter used to directly PEEK and POKE memory address. Read More
Featured
What is PKCS#11, why does it suck, and why will you keep using it?
In this video, Josh discusses about the PKCS#11 standard. Read More
Featured
Cryptocurrency Hardware Kinda Sucks
In this video, I confuse “Big Time” with “Sledgehammer.” Those music videos are still pretty epic. Then, I go into a bit of a rant of why cryptocurrency hardware, mainly for wallets, is different than normal cryptographic hardware. Read More
Featured
Introduction to RISCV Security
On Aug. 26/27, I’ll be giving a RISCV Security Class! We’ll look through the hype of RISCV and look at the security model. Read More