Blog

Notes on embedded security, kernel hardening and regulatory compliance.

September 4, 2025 · 12 min read

Secure Remote Access with Yocto

Why exposing root over SSH for field debugging is a bad idea, and how to replace it with SSH certificates, a restricted account and sudo on Yocto.

August 4, 2025 · 10 min read

Efficient Management of CVEs with Yocto

Generating an SBoM and CVE summary with Yocto's cve-check, filtering out irrelevant Linux kernel CVEs, and annotating what's left with Vulnscout.

January 5, 2025 · 15 min read

Linux Kernel Hardening

How to properly configure the Linux kernel: five configuration mechanisms, the kernel-hardening-checker tool, command-line hardening and a full sysctl hardening reference for embedded systems.