Florian Amette
Security engineer and DFIR practitioner writing vendor-neutral guides to the hardware that protects keys, identities and evidence.
U1 · Authentication hardware
How FIDO2, WebAuthn and CTAP stop phishing, the difference between device-bound and synced passkeys, and the criteria that matter when buying hardware keys.
U6 · Forensic acquisition hardware
Hardware versus software write blocking, standalone imagers, NIST CFTT testing, SSD and NVMe pitfalls, HPA/DCO checks and a validation routine for your own acquisition kit.
U7 · Hardware research lab
The equipment for assessing embedded devices you own or are authorized to test: power and measurement, logic analyzers, UART adapters, JTAG/SWD probes, SPI flash readers, and the defenses they reveal.
U4 · Hardware wallets
A security-engineering look at hardware wallets: seed generation, secure elements versus microcontrollers, trusted displays, air-gapped signing, supply-chain attacks and backup design.
U3 · HSMs & key management
A practitioner's guide to HSMs: what FIPS 140-3 levels actually certify, PKCS#11 and other APIs, network, PCIe, USB and cloud HSMs, quorum controls and key ceremonies.
U8 · Selection & supply chain
A vendor-neutral method for selecting security hardware: what FIPS 140-3, Common Criteria and FIDO certifications prove, supply-chain checks on delivery, firmware policy, spares and secure disposal.
U5 · Network appliances & lab firewalls
How to size a firewall box for a home or corporate security lab: NIC chipsets, AES-NI, RAM for IDS, VLAN design on managed switches, and network TAPs versus SPAN ports.
U7 · Hardware research lab
How SDRs differ in frequency range, bandwidth, ADC resolution and transmit capability, which one fits which defensive task, and the legal and RF-safety guard rails for a radio lab.
U2 · TPM & secure enclaves
What a TPM 2.0 really protects, how PCR measurements and sealing work, discrete versus firmware TPMs, and how to bind BitLocker or LUKS to the boot chain.