Matthew Garrett
where else to find them
x:mjg59
what they talk about
where they keep going back
- Linux Security Summit North America2 editions2019–2026
- Linux Security Summit Europe2 editions2018–2023
- Open Source Bridge2 editions2013–2014
all 9 in the filters
on a stage with
- Brandon Weeksonce
- Bryant Walker Smithonce
- Dave Chinneronce
all 11 in the filters
who talks about the same things
- Ignat Korchagin36 talks
- Nayna Jain5 talks
- George Wilson7 talks
- Jan Lübbe9 talks
- Mimi Zohar7 talks
- Greg Kroah-Hartman36 talks
| title | conference | date |
|---|---|---|
| Secure Hibernation in a Locked Down World | Linux Security Summit North America 2026 | 2026-05-21 |
Lockdown LSM currently disables hibernation because a tampered hibernation image can load an attacker kernel; the patchset generates a TPM key in-kernel tied… | ||
| Practical (and impractical) git commit signing | BSidesSF 2026 | 2026-03-21 |
Argues that commit signatures can give provenance but real tooling breaks the assurances; demonstrates working code and CI checks (links and repo provided) and… | ||
| Hardware-backed Per-process Secrets | Linux Security Summit Europe 2023 | 2023-09-20 |
Proposes sealing TPM secrets to processes or namespaces so a TPM blob can only be loaded while a specific process or container is running, implemented as… | ||
| TPM based attestation - how can we use it for good? | linux.conf.au 2020 | 2020-01-13 |
Systems with TPMs produce signed PCR quotes plus an event log; this shows which boot components hashed into the final PCR value and lets a verifier check… | ||
| Using TPMs to Cryptographically Verify Devices at Scale | Open Source Summit + Embedded Linux Conference North America 2019 | 2019-08-21 |
Google uses TPM-based remote attestation to give each workstation a hardware-backed identity and verify boot state across 25,000 machines, combining PCR values… | ||
| Making Remote Attestation Useful on Linux | Linux Security Summit North America 2019 | 2019-08-19 |
Goal is cryptographic identity and state attestation for Google’s ~200,000 Linux and Windows machines, supporting TPM 1.2 and 2.0 and implemented in Go. Work… | ||
| Tying EVM into LSM Policy | Linux Security Summit Europe 2018 | 2018-10-25 |
EVM gets tied into LSMs by using AppArmor profile attachments based on extended attributes so files with a protected security.EVM xattr run in a trusted… | ||
| Towards Measured Boot Out of the Box | Linux Security Summit 2016 | 2016-08-25 |
CoreOS adds practical measured boot: UEFI + TPM2 support in the bootloader, PCR-based measurement with log replay verification, and a working demo that seals a… | ||
| Freedom, security and the cloud | Open Source Bridge 2014 | 2014-06-24 |
Cloud hosting boosts utilization and lowers cost but adds layers of software and attack surface: hypervisors, QEMU, orchestration and management. Claims… | ||
| Linux Kernel Developer Panel | Linux Foundation Collaboration Summit 2014 | 2014-03-26 |
Companies fund kernel work because it buys access to expertise and influences direction, not just free code, with about 10–20% volunteers and companies like… | ||
| Using Secure Boot for the powers of good | Open Source Bridge 2013 | 2013-06-18 |
Secure Boot can be a user-controlled root of trust rather than a vendor lock‑in: produce an x509 key with openssl, sign a bootloader with sbsign, enroll the… | ||
| Panel: GPLV3, Tivoization, and Automotive Linux | Collaboration Summit 2013 | 2013-04-15 |
Discussion centers on whether GPLv3’s anti-tivoization (section 6) actually covers cars by calling ordinary consumer vehicles a user product under… | ||
| nothing matches | ||