Why Open Source Firmware is Important
summary
Argues that hidden privileged firmware causes real outages and security failures, backed by survey anecdotes and concrete incidents: a firmware flash affecting 3,000 machines, a C6100 update with a 50% failure rate, and vendors shipping inconsistent SKUs. Describes practical tools and wins: Coreboot/LinuxBoot in production, a Cleaner tool to strip management engines, and measured 5× faster boot. Covers vendor locks like Intel Boot Guard and examples of on-chip roots of trust (Google Titan, Amazon Nitro, Apple T2) and whether those designs actually prevent tampering.
AI-written summary · about
chapters (6)
- 0:00Intro
- 1:21Ring -1: Hypervisor
- 6:39Intel Boot Guard
- 12:48Conway's Law
- 18:44Open Source Firmware
- 24:44Amazon has Nitro
related talks
32mWhy Open Source Firmware is Important
31mOn this Rock I will Build my System - Why Open-Source Firmware Matters
56mFirmware Supply Chain Security BoF
33mThe Various Shades of Supply Chain: SBOM, N-Days and Zero Trust
40mHardware Security Is Hard: How Hardware Boundaries Define Platform Security
44mOpen System Firmware Projects
21mIndustrial IoT security issues and countermeasures
37mThe Firmware Supply-Chain Security Is Broken: Can We Fix It?