#attestation — Public Fediverse posts

#RicochetRefresh and #Arti build on #Fedora Atomic #OS.
#rustlang environment is also functional in #rpm #ostree.
(#immutability over sandboxing if not live?)
#FreedomOfThePress #Journalism #ComputerScience #Linux @freedomofpress @torproject

jk, Rotational #HDD and #Rust work together just fine.
Anomalies and vulns in #QubesOS . . .
#console #hacking #rpc #Wayland #fastly @rust

Foreign Sources as attack vector
http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Install_Software#Foreign_Sources
also → APT::KashGrow “true”;

What other flaws might lie in confidential computing core trust mechanisms?
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056
@QubesOS @whonix
#attestation #TLS
@rfceditor #GOS

also, in case you didn't know,
rpm-ostree kargs --append=
is really great
and rpm-ostress works over torsocks, atomic just doesn't like systemd so run 'tor' manually

#Karg #Kernel

In short: #degoogle wants up-to-date reliable #biometric #data #attestation for yours truly in addition to all the rest if possible.
No, tnx!

Google Adds Selfie Video As a Log-In Option - Slashdot

https://yro.slashdot.org/story/26/07/24/0144247/google-adds-selfie-video-as-a-log-in-option?utm_source=rss1.0mainlinkanon&utm_medium=feed

> An anonymous reader quotes a report from Engadget: You'll now be able to use selfie videos to log into your Google account. It has long been possible to log into Google using your face, via your phone's face unlock or if your passkey login uses biometrics for verification.

Well, it looks like #MobilePay reverted to check Play Integrity again. #Europe does not have a chance at Digital Sovereignty if all Android phones must be #Google #Certified and businesses keep the only option of #Play #Integrity.

#Unified #Attestation is the alternative for non Google devices (#Jolla, #Volla, #deGoogled Android) but unless this is mandated by @EUCommission, this means all banking and financial services will be monitored, gated and blocked if needed on a whim.

@nitrokey what do you think about https://github.com/w3c/webauthn/pull/2078 (see https://github.com/wwWallet for context)? Implementing #eudi_wallet using #nitrokey would sound much better than using any proprietary Apple or Android #attestation code. (edit: replaced old PR by current one)

Hardware Attestation as Monopoly Enabler

https://grapheneos.social/@GrapheneOS/116550899908879585

#HackerNews #Hardware #Attestation #Monopoly #Security #Privacy #Tech

So attezt now contains 3 components.

- `atteztd` which is an Attestation CA with an inventory API
- `attezt-agent` that implement device enrollment and an p11-kit agent.
- `attezt` that is the client for both the agent and the attestation ca. Modelled after step/step-ca

Everything has an #varlink APIs as well.

https://github.com/Foxboron/attezt

Very much a work in progress and not everything is wired up correctly. Readme also needs a bit more work.

#TPM #Attestation #Security #security

Does the chrome Endpoint Verification extension do any TPM attestation? Or is it just osquery wrapped in an extension?

Tried reading the docs but it doesn't really mention how the information is collected.

#TPM #Attestation #Chrome #security

Totes deployed device-attest-01 with `attezt` to my local infra, and it works!

#TPM #Attestation #Security

Would writing/maintain a public for-good Linux TPM attestation service be interesting for people?

Mainly to help people do the attestation part of `device-attest-01` without self-hosting this.

#TPM #Attestation

Au #travail vous conduisez des engins ou vous avez une habilitation électrique ?
Voici (en annexe) les documents qui doivent vous être remis par votre médecin du travail depuis le 1er octobre : https://www.legifrance.gouv.fr/download/pdf?id=Jc5MppPyHDwxQXm4ceFA0fyPpUVXDsxSS7PEreByYJg=

#travail #CACES #attestation #médecineDuTravail

CSPs MUST allow customer-provided virtual firmware (with a well-documented interface for achieving UEFI variable persistence and ACPI table information) OR publish the sources for their virtual firmware.

Transparency has value by @drdeeglaze
https://deeglaze.github.io/blog/2025/Transparency-has-value/

#ConfidentialComputing #Attestation #ReproducibleBuilds

Auditor app version 89 released:

https://github.com/GrapheneOS/Auditor/releases/tag/89

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/22183-auditor-app-version-89-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 88 released:

https://github.com/GrapheneOS/Auditor/releases/tag/88

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/21632-auditor-app-version-88-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 87 released:

https://github.com/GrapheneOS/Auditor/releases/tag/87

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16868-auditor-app-version-87-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 86 released:

https://github.com/GrapheneOS/Auditor/releases/tag/86

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16094-auditor-app-version-86-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 85 released:

https://github.com/GrapheneOS/Auditor/releases/tag/85

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15578-auditor-app-version-85-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 84 released:

https://github.com/GrapheneOS/Auditor/releases/tag/84

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15343-auditor-app-version-84-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 83 released:

https://github.com/GrapheneOS/Auditor/releases/tag/83

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15154-auditor-app-version-83-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

This Week in Security: Echospoofing, Ransomware Records, and Github Attestations - It’s a bit of bitter irony, when a security product gets used maliciously, to pull... - https://hackaday.com/2024/08/02/this-week-in-security-echospoofing-ransomware-records-and-github-attestations/ #thisweekinsecurity #hackadaycolumns #securityhacks #attestation #ransomware #news #spam

This Week in Security: Echospoofing, Ransomware Records, and Github Attestations https://hackaday.com/2024/08/02/this-week-in-security-echospoofing-ransomware-records-and-github-attestations/ #ThisWeekinSecurity #HackadayColumns #SecurityHacks #Attestation #ransomware #News #spam

Auditor app version 82 released:

https://github.com/GrapheneOS/Auditor/releases/tag/82

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/14512-auditor-app-version-82-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor