Supply Chain Security
In-depth guides and analysis on supply chain security from the Safeguard engineering team.
100 articles
Git Release History 2005 to 3.0: Protocol v2, SHA-256, Signing
Git went from a 2005 first commit to 2.56 in 2026. Git 3.0 has not shipped; it will default to SHA-256, reftable and main. What changed for security.
eMMC and UFS Explained: RPMB, Inline Encryption and Secure Erase
eMMC and UFS are the soldered flash inside phones, cars and boards. How they differ, what RPMB holds, how inline encryption works and how to erase them.
RCS Messaging Explained: Universal Profile, IMS, MLS and Business Chat
What RCS is, how it runs over IMS with SIP and MSRP, how MLS end-to-end encryption reached Android and iPhone, what still leaks, and how business senders work.
LLMNR and NBT-NS Explained: Name Poisoning Risk and How to Turn Them Off
LLMNR and NetBIOS Name Service are legacy fallbacks that any host on the link can answer. Learn the poisoning risk and how to switch both off safely.
OpenHarmony Release History: Versions, Kernels, ArkTS and Security
OpenHarmony went from 1.0 in September 2020 to 6.x in 2026. Every release line, its kernels, the ArkTS app model, signing, permissions and patch policy.
How Smart Glasses Are Made: Cameras, Mics, Displays, Firmware, Privacy
Smart glasses fit a camera, mic array, speakers, an SoC and sometimes a waveguide display into a frame. How each part is built and what bystanders face.
Kernel Module Signing and DKMS Explained: sig_enforce, MOK, Secure Boot
Linux checks a signature appended to each .ko file. Learn how sig_enforce, lockdown, MOK keys and DKMS decide whether an out-of-tree driver loads.
Firefox and Firefox ESR Release History: Cadence, ESR and Security
Firefox went from yearly releases to six, four and now two week trains, with ESR lines that run about a year. Every era, its security features and dates.
OpenSSL Release History: SSLeay to 3.x and 4.0, Security and Support
OpenSSL forked from SSLeay in 1998, rebuilt itself around providers in 3.0 and shipped 4.0 in April 2026. Every line, its defaults and its support window.
TFTP Explained: RFC 1350, Options, Block Size and How to Contain It
TFTP is a tiny UDP file protocol from RFC 1350 with no login and no encryption. Learn how it works, what blksize and windowsize add, and how to contain it.
gNMI and Streaming Telemetry Explained: Subscriptions and Security
gNMI is OpenConfig's gRPC API for reading, changing and streaming network device state. Learn its RPCs, subscription modes, dial-out and TLS setup.
How a Continuous Glucose Monitor Is Made: Sensors to Bluetooth Data
A CGM is an enzyme sensor in interstitial fluid, a sterile applicator and a Bluetooth transmitter running firmware. See how each part is made and secured.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.