security News - Page 28 of 42 - CNX Software

August 12, 2019August 12, 2019 by Jean-Luc Aufranc (CNXSoft) - 5 Comments

Linaro Connect San Diego 2019 Schedule – IoT, AI, Optimizations, Compilers and More

Linaro has recently released the full schedule of Linaro Connect San Diego 2019 that will take place on September 23-27. Even if you can’t attend, it’s always interested to check out the schedule to find out what interesting work is done on Arm Linux, Zephyr OS, and so on. So I’ve created my own virtual schedule with some of the most relevant and interesting sessions of the five-day event. Monday, September 23 14:00 – 14:25 – SAN19-101 Thermal Governors: How to pick the right one by Keerthy Jagadeesh, Software Engineer, Texas Instruments With higher Gigahertz and multiple cores packed in a SoC the need for thermal management for Arm based SoCs gets more and more critical. Thermal governors that define the policy for thermal management play a pivotal role in ensuring thermal safety of the device. Choosing the right one ensures the device performs optimally with in the thermal budget. […]

August 9, 2019August 9, 2019 by Jean-Luc Aufranc (CNXSoft) - 6 Comments

Somu Tiny Open Source FIDO2 Security Key Enables Passwordless Login & Two-factor Authentication (Crowdfunding)

Tomu is a tiny, open source USB connector-sized board powered by a Silicon Labs Happy Gecko Cortex-M0+ MCU that adds two keys to your computer and can work as a Universal 2nd Factor (U2F) token to support two-factor authentication (2FA). But the board is not secure enough for FIDO2 support, and Tomu’s developer worked on a secure USB key called Solokey, and shrank it to Tomu form factor. Meet Somu open-source and secure key with FIDO2 support for compatibility with your Google, Twitter, and GitHub accounts for two-factor authentication, or your Microsoft account passwordless login. Somu hardware specifications: Secure MCU – STMicro STM32L432KC Arm Cortex-M4 microcontroller with TRNG, security isolation for keys, two levels of locked flash Crypto Algorithms – ECC P256 (as per FIDO2 standard) Supported Protocols – FIDO2, U2F Host Interface – USB type-A port Misc – Two touch buttons ( in FIDO2 firmware the two buttons behave […]

July 17, 2019July 17, 2019 by Jean-Luc Aufranc (CNXSoft) - 5 Comments

Group Theoretic Cryptography (GTC) Offers an Alternative to TLS’s ECC/RSA Security for Microcontrollers

The Transport Layer Security (TLS), sometimes incorrectly referred as its predecessor: Secure Sockets Layer (SSL), helps securing messages over the network using symmetric cryptography, and optionally public-key cryptography (aka asymmetric cryptography). This works well in servers and computers, but with the Internet of Things, even low-power sensor nodes would benefit from secure communication. The trouble is that today’s commonly-implemented RSA- and Diffie-Hellman-type public-key protocols have a memory footprint that will not fit on resource-constrained microcontrollers systems, e.g. Arm Cortex-M0 based ones, and power consumption may also be an issue since many of those are battery-powered. I’m writing about this topic today, as there may be a better alternative for resource-constrained microcontrollers which I noticed in Arm Techcon 2019 schedule, with SecureRF Corporation’s session entitled “When it comes to connect IoT devices, how small is small?” that will present an alternative to TLS’s ECC and RSA based security that relies on […]

July 16, 2019 by Jean-Luc Aufranc (CNXSoft) - 5 Comments

Ameba Z2 IoT Board Features Realtek RTL8720CM Armv8-M KM4 Secure Wireless MCU

In 2016 we discovered Realtek Ameba wireless microcontrollers combining an Arm Cortex-M3 core with WiFi connectivity, and that could potentially become an ESP8266 competitor with modules selling for as low as $2. But the solution never really took off, because it was about the same price as ESP8266, and the latter already had a solid software ecosystem and community. But RealTek has now introduced a new Ameba Z2 IoT development board powered by RTL8720CM microcontroller featuring an Armv8-M KM4 core clocked at 100 MHz. What’s an Arm KM4 core you may ask? Seeed Studio informed me Arm and RealTek worked together on the KM4 core, so it looks like a custom Armv8-M microcontroller. Ameba Z2 IoT Development Board Ameba Z2 (ZII) specifications: Wireless MCU – Realtek RTL8720CM single core Armv8-M KM4 core @ 100MHz with 4.2MB internal RAM, WiFi and Bluetooth radios Storage – 2MB external flash on module Connectivity […]

July 13, 2019 by Jean-Luc Aufranc (CNXSoft) - No Comments

Arm Techcon 2019 Schedule – Machine Learning, Security, Containers, and More

Arm TechCon will take place on October 8-10, 2019 at San Jose Convention Center to showcase new solutions from Arm and third-parties, and the company has now published the agenda/schedule for the event. There are many sessions and even if you’re not going to happen it’s always useful to checkout what will be discussed to learn more about what’s going on currently and what will be the focus in the near future for Arm development. Several sessions normally occur at the same time, so as usual I’ll make my own virtual schedule with the ones I find most relevant. Tuesday, October 8 09:00 – 09:50 – Open Source ML is rapidly advancing. How can you benefit? by Markus Levy, Director of AI and Machine Learning Technologies, NXP Over the last two years and still continuing, machine learning applications have benefited tremendously from the growing number of open source frameworks, tools, […]

June 19, 2019October 29, 2019 by Jean-Luc Aufranc (CNXSoft) - 3 Comments

Winston Privacy Filter Lets You Browse the Web Anonymously, Ad-free & Tracking-free (Crowdfunding)

More and more people are worried about their privacy online, so products and solutions aiming to protect people against tracking, targeted ads, cookies, and various other threat have been popping up. Fingbox and Firewalla are such devices, but their hardware may be limited, and software solutions like PiHole are also an option, but may not be suitable for everyone. Winston privacy filter is another plug-and-play solution, but based on an actual network processor, namely a Marvell ARMADA dual core Arm Cortex-A53 SoC, that should make sure your network performance is not impacted, and even provides a boost of performance for most visited websites due to the resources that are being blocked out. Winston “privacy filter” hardware specifications: SoC – Marvell ARMADA dual core Arm Cortex-A53 processor @ 1.0 GHz with security and data acceleration engines System Memory – 1GB DDR4 @ 800 MHz Storage – TBD Networking – Dual Gigabit […]

June 16, 2019June 16, 2019 by Jean-Luc Aufranc (CNXSoft) - 17 Comments

Reolink Argus Eco Review – A Sub-$100 Solar Powered Security Camera

Reolink Argus Eco IP Camera Wall Mounted

I’ve been thinking about installing one or more IP camera in my home for a while, and for ease of installation and considering I’m renting, my preference was to go with one of those battery IP cameras similar to Amazon (Immedia) Blink IP camera or Eufy EverCam security camera that last six months to one year on a single charge. But earlier this year I came across Reolink Argus 2 battery powered security camera that looks like good value at $100, and also came with an optional solar panel so you don’t have to ever charge the camera. The company latter contacted me to know whether I’d be willing to try out their latest Reolink Argus Eco camera with similar features but an even lower $89.99 price tag. I got my sample a few weeks ago, and I had time to install it, and play around with the camera during […]

May 23, 2019 by Jean-Luc Aufranc (CNXSoft) - 4 Comments

SAUCS is a Search Engine for Security Vulnerabilities (CVE Database)

Every so often we hear about critical security vulnerabilities in the news, but new ones are actually discovered daily, so it would be nice to have some sort of search engine to find out which known security vulnerabilities a given product or processor may have before purchasing it, or even more importantly starting a project. SAUCS does just that by having robots checking out the CVE update list, parsing the XML feed and formatting it. You can search for products or process, or subscribe to the vendors and products you want, and receive an email as soon as new changes as detected. I found out about SAUCS thanks to a comment from Thomas who pointed out the Qualcomm MDM9607 processor found in Quectel EC25 LTE module had a fairly long list of CVE (Common Vulnerabilities and Exposures) entries while using the default? firmware as shown in the screenshot above. Each […]