Guías

How FIDO2, WebAuthn and CTAP stop phishing, the difference between device-bound and synced passkeys, and the criteria that matter when buying hardware keys.

Hardware versus software write blocking, standalone imagers, NIST CFTT testing, SSD and NVMe pitfalls, HPA/DCO checks and a validation routine for your own acquisition kit.

The equipment for assessing embedded devices you own or are authorized to test: power and measurement, logic analyzers, UART adapters, JTAG/SWD probes, SPI flash readers, and the defenses they reveal.

A security-engineering look at hardware wallets: seed generation, secure elements versus microcontrollers, trusted displays, air-gapped signing, supply-chain attacks and backup design.

A practitioner's guide to HSMs: what FIPS 140-3 levels actually certify, PKCS#11 and other APIs, network, PCIe, USB and cloud HSMs, quorum controls and key ceremonies.

A vendor-neutral method for selecting security hardware: what FIPS 140-3, Common Criteria and FIDO certifications prove, supply-chain checks on delivery, firmware policy, spares and secure disposal.

How to size a firewall box for a home or corporate security lab: NIC chipsets, AES-NI, RAM for IDS, VLAN design on managed switches, and network TAPs versus SPAN ports.

How SDRs differ in frequency range, bandwidth, ADC resolution and transmit capability, which one fits which defensive task, and the legal and RF-safety guard rails for a radio lab.

What a TPM 2.0 really protects, how PCR measurements and sealing work, discrete versus firmware TPMs, and how to bind BitLocker or LUKS to the boot chain.