foss-north 2022
2022-04-20..2022-04-21
-- online --
[foss-north 2017, foss-north 2018, foss-north 2019, foss-north 2020, foss-north 2020 take ii, foss-north 2021, foss-north 2022, foss-north 2023, foss-north 2024, foss-north 2025, foss-north 2026]
who it's for
open source developers, security engineers, embedded engineers, software compliance engineers, devops engineers, community managers, project managers
topics
software composition analysis (SCA); SBOM generation and SPDX/CycloneDX; secure boot and trusted execution environments; TPM TrustZone and SGX/OP-TEE; QEMU internals and TCG translation blocks; Yocto and BitBake embedded builds; CI-based compliance pipelines (GitLab CI, Fossology, ScanCode); open source governance and role diversity; React and web application security (XSS, SQLi, XXE); LibreOffice platform refactoring and automation; SPDX SBOM publishing and dashboarding
| title | author | length |
|---|---|---|
| Open Source SCA | Julian Coccia | 31m |
Open source SCA platform provides a free public knowledge base (osskb.org) and commercial data subscriptions, plus Python and JavaScript CLIs, a multi‑platform… | ||
| What should I know about secure boot and TEEs? | Marta Rybczynska | 40m |
Explains why secure boot must pair with TEEs to stop a malicious bootloader from spoofing a runtime: TPM (2007) is usually a separate chip and cannot do DMA so… | ||
| LibreOffice Technology, a FOSS platform for personal productivity | Italo Vignoli | 54m |
LibreOffice is a maintained FOSS productivity platform that moves from a desktop fork into a single engine powering desktop, mobile and cloud front ends and… | ||
| It takes a Village - Role Diversity in Open Source | Silona Bonewald | 44m |
IEEE launches an open source education platform and focuses on role diversity to turn users into makers, not just coders. The project runs on BigBlueButton… | ||
| Qemu Demystified | Florian Wagner | 26m |
Deep dive into QEMU internals showing how full system emulation maps guest memory with memory regions, models peripherals as simple read/write functions, and… | ||
| React Security | Dimitur Jilanov | 43m |
Live demos show XSS stealing cookies, SQL injection dumping and deleting SQLite tables, XXE reading files, zip slip via adm-zip writing files into system… | ||
| Eclipse Oniro compliance toolchain | Carlo Piana, Alberto Pianon, Rahul Mohan G | 43m |
Oniro is a multi‑kernel embedded OS built with Yocto/BitBake and comprising thousands of packages; the compliance pipeline integrates GitLab CI, Fossology… | ||
| nothing matches | ||