Designing Firmware That Survives a Glitch

You cannot stop a glitch, but you can make one insufficient. Here are the firmware patterns that survive fault injection.
Bypassing JTAG Lock With Hardware Access

A locked JTAG port is not always a closed one. Here is how physical access is used to re-open disabled debug interfaces, and why locking alone is not the end.
Blowing Fuses: Locking Down a Production Device

One-time-programmable fuses turn security features on permanently. Here is what they protect and why shipping with them unblown is a common, costly mistake.
Measured Boot vs Secure Boot

Secure boot and measured boot sound similar but do different jobs. Here is how they differ, how each works, and when you want both.
Closing Debug Ports Without Breaking Field Repair

Disabling debug ports hardens a device but can block legitimate repair. Here is how to lock down without painting yourself into a corner.
Why Encrypted Firmware Is Not Enough

Encrypting firmware feels like the finish line, but the key has to live somewhere. Here is why encryption alone rarely stops a determined attacker.
Secure Boot on STM32: What Actually Protects You

STM32 chips offer real secure boot features, but only if you configure them. Here is what protects you, what is off by default, and how to verify it.