[$] KRACK, ROCA, and device insecurity

<p>Monday October 16 was not a particularly good day for those who areeven remotely security conscious-or, in truth, even for those who aren't. Twoseparate security holes came to light; one probably affects almost allusers of modern technology. The other is more esoteric at some level, butstill serious. In both cases, the code in question is baked into variousdevices, which makes it more difficult to fix; in many cases, the devicesin question may not even have a plausible path toward a fix. Encryptionhas been a boon for internet security, but both of these vulnerabilitieshave highlighted that there is more to security than simply cryptography.