Hardware Podcasts

#002: The secrets to building secure & scalable OTA infrastructure with Nick Sinas

Coredump Sessions · 18 Dec 2024 · 57m · Episode 3

What this episode covers

Nick Sinas, CTO at Oval, and Chris Coleman, CTO at Memfault, discuss the critical importance of Over-the-Air (OTA) updates for connected devices, emphasizing that OTA must be designed into the hardware architecture from day one. They detail the technical requirements for secure, scalable OTA systems, including bootloader design, memory management, and cloud-side cohort rollouts to mitigate fleet-wide risks. The conversation highlights real-world failures, such as breaking future update capabilities due to stack overflow fixes, and stresses the need for rigorous testing, security best practices like signing keys, and fallback mechanisms like dual-bank architectures.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Memfault, Oval, Pebble
Also
Zephyr, LWIP, NetX, Matter, FDA, TPM, CryptoCell, Arcturus, MCU Boot, TUF

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 12m

    390: Irresponsible At the Time

    Tyler Hoffman, co-founder of Memfault, discusses the challenges of managing firmware updates, device diagnostics, and remote monitoring for millions of IoT devices. He draws on his experience at Pebble and Fitbit to explain why existing cloud platforms are often unsuitable for resource-constrained embedded systems, highlighting the need for secure boot, staged rollouts, and efficient heartbeat reporting. Hoffman details how Memfault’s platform helps engineers detect crashes, track battery life trends, and prioritize bugs by aggregating data from large device fleets. The conversation emphasizes the importance of defensive programming and building robust OTA systems to prevent bricking devices at scale.

    Embedded firmwareConnected products & IoT
    8 chapters

  • Embedded.fm · 1h 02m

    451: From Concept to Launch

    Elecia White, founder of Logical Elegance, and panelists Phillip Johnston of Embedded Artistry and Tyler Hoffman of Memfault discuss the software tasks often overlooked during the transition from concept to manufacturing launch. They emphasize the necessity of robust bootloaders, OTA update mechanisms, and dedicated manufacturing firmware that operates offline. The group highlights specific failures such as bricked inventory due to faulty OTA, network congestion in factories, and the high cost of testing security features like self-bricking. They also cover the importance of per-device key management, deterministic testing environments, and integrating manufacturing validation into CI pipelines.

    Embedded firmwareSecurity & privacy
    8 chapters

  • The Pragmatic Embedded Podcast · 43m

    Interview with Phillip Johnston Part 1

    Phillip Johnston, founder of Embedded Artistry, discusses the architectural and cultural requirements for building connected embedded systems, emphasizing the necessity of Over-the-Air (OTA) updates and robust feedback loops. He explains how telemetry data enables staged rollouts, automated issue detection, and preventative maintenance, allowing teams to prioritize development based on actual field performance rather than guesswork. Johnston also addresses the privacy and security complexities of collecting device data, advocating for secure, anonymized, and consent-based data handling practices.

    Connected products & IoTSecurity & privacy
    8 chapters

  • IoT For All Podcast · 31m

    IoT Device Security throughout a Solution's Lifecycle | Twilio’s Evan Cummack

    Evan Cummack, General Manager of IoT & Wireless at Twilio, explains how the company applied its developer-first API model to cellular IoT through products like Programmable Wireless, Super SIM, and the acquisition of Electric Imp. He discusses the challenge of 'serviceification' in IoT, citing examples like Pulsa sensors and San Sonio, and introduces Microvisor as a solution to the difficulty of managing device security and OTA updates. Cummack argues that hardware innovation is slowed by the steep climb from general-purpose to single-purpose computing, urging developers to use managed platforms for non-differentiating tasks like certificate management.

    Security & privacyConnected products & IoT
    7 chapters

  • IoT For All Podcast · 22m

    The IoT Security Landscape Today and in the Future | CableLabs' Kyle Haefner

    Kyle Haefner, Senior Security Engineer at CableLabs, discusses the IoT security landscape, emphasizing the need for immutable device identities and network segmentation to mitigate risks from legacy devices. He highlights the Open Connectivity Foundation's (OCF) work on secure interoperability and the importance of Public Key Infrastructure (PKI) for scaling trust. Haefner also addresses the challenge of balancing security with cost constraints across diverse device types, from high-powered gateways to battery-operated sensors.

    Security & privacyConnected products & IoT
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Coredump Sessions. The episode itself belongs to its publisher.