Make your own Read-Only Device with NetBSD
One detail that is often overlooked when dealing with embedded (or remote) devices is a key point of vulnerability: the file system.
https://it-notes.dragas.net/2024/09/10/make-your-own-readonly-device-with-netbsd/
