Explainers: Security
Secure Boot Certificates 2023: After the 2011 Expiry
What the 2023 Secure Boot certificate transition changes, how to find incomplete devices, and how to pilot remediation.
WebAssembly Sandbox Explained: Memory, Imports and Limits
How WebAssembly isolates linear memory, grants host capabilities through imports and where the sandbox ends.
How DNSSEC Works: Signatures, Trust and Limits
How DNSSEC authenticates DNS answers through signatures, DS records and a chain of trust—and what it cannot protect.
Software Bill of Materials: What an SBOM Proves
An SBOM maps software components. Here is what it can support—and what it cannot prove.
End of Life Software: What Changes When Updates Stop
The program keeps running, but security fixes stop. What end of support means and how to find what you run.
Trusted Platform Module: What the TPM in Your PC Does
A TPM holds keys and records how a PC started. It does not encrypt files or stop malware on its own.
How a Software Dependency Becomes a Security Risk
Direct, transitive, build-time and system dependencies reach your code by different routes. How to list them all.