Matthew Garrett

Cordoomceps - replacing an Amiga's brain with Doom

Secure boot certificate rollover is real but probably won't hurt you

Why is there no consistent single signon API flow?

My a11y journey

Locally hosting an internet-connected server

How Twitter could (somewhat) fix their encrypted DMs

Twitter's new encrypted DMs aren't better than the old ones

Failing upwards: the Twitter encrypted DM failure

The GPU, not the TPM, is the root of hardware DRM

When should we require that firmware be free?

Android privacy improvements break key attestation

What the fuck is an SBAT and why does everyone suddenly care

Client-side filtering of private data is a bad idea

SSH agent extensions as an arbitrary RPC mechanism

Digital forgeries are hard

Debugging an odd inability to stream video

Dealing with weird ELF libraries

Making SSH host certificates more usable

Why does Gnome fingerprint unlock not unlock the keyring?

Why ACPI?

Defending abuse does not defend free software

Reconstructing an invalid TPM event log

Unix sockets, Cygwin, SSH agents, and sadness

Updating Fedora the unsupported way

Roots of Trust are difficult