I’ll be presenting at Yocto Project Summit this year. It’ll be a quick lighting talk about creating generic Yocto distributions

pretalx.com/yocto-projec...

New blog post on how to harden access to the U-Boot command line interface

ejaaskel.dev/protecting-u...

kas-sulka kas configuration for building Sulka

Release 0.2.0 of the secure Yocto distro Sulka is out now. You can get started here, and feel free to ask if you’ve got questions

codeberg.org/AltidSec/kas...

Hack After Dark Hack After Dark on Oulussa 18.10.2025 järjestettävä hakkerihenkinen tapahtuma. Tapahtuma on vapaamuotoinen, sisältää puheenvuoroja, verkostoitumista, keskusteluita ja mahtavan hakkerivisan. Hack After...

I’ll be presenting at Hack After Dark in Oulu, Finland on October 18th. The topic is a familiar one, humans and cybersecurity. More info from the link below

tarlab.fi/HackAfterDark

I wrote a bit more about the kernel module signing to my blog

ejaaskel.dev/module-signi...

New blog post about Yocto hardening is now out. This time we’ll discuss about signing kernel modules

ejaaskel.dev/yocto-harden...

Thanks! Seems useful for staying in the loop

I spent a day studying and trying to understand EU CRA. Surprisingly, it wasn’t the dullest day ever

Open Source Summit Europe 2025: Thinking Outside the (Linux) Box: Securi... View more about this event at Open Source Summit Europe 2025

The slides for my #OSSummit Europe presentation are pretty much done, and the “beta test” presentation today went well. Looking forward to doing the actual presentation the next Monday!

osseu2025.sched.com/event/25VnI/...

Making a presentation feels a bit like making music. After certain point all the “improvements” end up making the final result worse

For someone who’s scared of flying, the constant “your flight is in X days” reminder mails are quite stressing

Some recent updates to Sulka distro, too many to list out in a single post so you’ll have to settle for LinkedIn screenshot

It's frustrating when you accidentally copy-paste your secret password into a chat and get your account hacked. Fortunately, multi-factor authentication can prevent that. This applies to the embedded Linux devices as well. I wrote a blog on how to enable MFA on Yocto: ejaaskel.dev/yocto-harden...

Balatro is going to destroy my productivity

meta-sulka-distro Meta-layer for Sulka, hardened Yocto Linux distribution

Some additions to Sulka, secure Yocto distro, from the past few weeks:
- Added kas configuration
- Added rudimentary tests
- Added password expiration option
- Hardened /proc and tmpfs moutns
- Changed password encryption to yescrypt
- Few more smaller changes

Link here
codeberg.org/altidsec/met...

Open Source Summit Europe 2025: Thinking Outside the (Linux) Box: Securi... View more about this event at Open Source Summit Europe 2025

In my excitement I forgot to share here that I’ll speaking in the Embedded Linux conference (part of Open Source Summit Europe) about how humans affect the security of embedded systems osseu2025.sched.com/event/25VnI/...

I started to write a secure Yocto distro to put the lessons learned from my Yocto Hardening blog series into use. It’s still quite early in the development, but it’s in a stage where it can be tested ejaaskel.dev/introducing-...

Here’s the first part in case you missed it

ejaaskel.dev/running-zeph...

Continuing with the FPGA stuff in the new blog post, getting a bit deeper into the block design.

ejaaskel.dev/adding-spi-a...

Stydying FPGA continues, this time we’re throwing an RTOS into the mix ejaaskel.dev/running-zeph...

New blog post about package configuration in Yocto is out now:

ejaaskel.dev/configuratio...

I wrote a blog post about how to connect two boards with three jumper wires, and that’s approximately a 14 minute read. I may need to learn more concise writing. But yes, a new text about connecting a RasPi and an FPGA board to each other and using UART to communicate:

ejaaskel.dev/linux-fpga-t...

“With Rust, you have the hangover first”

From an internal conference

You might wonder why the new encryption blog post has a picture of a deer in it. It's because it is a key deer, and encryption uses keys, and that is hilarious.

ejaaskel.dev/encrypting-i...

I'd like to switch back to Mastodon, but I already spent an hour trying to make a Bluesky feed plug-in look correct in WordPress. I feel like I'm too invested in this to quit.

Vibe coding basically sounds like an upgrade to low-code/no-code tools. Or a downgrade, not 100% sure yet.

Also, in case you missed it, here’s the first part

ejaaskel.dev/yocto-harden...

The second blog post about encryption in Yocto is out now. This time we’re getting into file system encryption.

ejaaskel.dev/yocto-harden...

I've been using Linux recently and the smugness it makes me feel is divine. You guys raved about everything except the smugness. You should lead with that next time you sell it to the mainstream

I mean, if I knew a lot about AI or if I was selling AI services, it would make sense to post stuff like that. But neither is true. I'll have to reduce browsing LinkedIn, that's true for sure.