Why Open Source Firmware is Important

on YouTube ↗32m

" summary

Firmware below the OS holds the most privilege but the least visibility, with an Intel ME web‑server bug lingering seven years and management engines able to reimage powered‑off machines. Practical fixes use ME Cleaner to remove network/web pieces, replace UEFI with coreboot and a minimal kernel like LinuxBoot plus an initramfs; deployments report up to 22× faster boot and successful home and scale experiments removing many attack surfaces.

AI-written summary · about

" chapters (8)

1. 0:00Intro
2. 1:24Security
3. 8:40Mod Chips
4. 9:55Boot Guard
5. 12:26Usability
6. 14:33Visibility
7. 19:50Bugs
8. 23:36Nerf

" related talks

• 30mWhy Open Source Firmware is ImportantJessica Frazelle · DevOpsDays Chicago 2019
• 38mReplace Your Exploit-Ridden Firmware with LinuxRonald G Minnich · Open Source Summit Europe + Embedded Linux Conference Europe 2017
• 31mOn this Rock I will Build my System - Why Open-Source Firmware MattersLucas Stach · Open Source Summit Europe & ELC + OpenIoT Summit Europe 2018
• 44mOpen System Firmware ProjectsElaine Palmer · Linux Security Summit North America 2018
• 44mImpact of Platform Firmware on Linux KernelMegha Dey, Sai Praneeth Prakhya · Embedded Linux Conference + OpenIoT Summit North America 2018
• 56mFirmware Supply Chain Security BoFJerry Bryant · CVE/FIRST VulnCon 2024 & Annual CNA Summit
• 37mThe Firmware Supply-Chain Security Is Broken: Can We Fix It?Kai Michaelis, Richard Hughes, Alex Matrosov, Alex Ermolov · Black Hat Asia 2022
• 01h 04mAnalyzing UEFI BIOSes from Attacker & Defender ViewpointsXeno Kovah · Black Hat Europe 2014