# 515: Script Boomers

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2025-11-27
- Length: 1h 10m
- Episode: 515
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers
- Listen: https://embedded.fm/episodes/515

## Summary

Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=6) Introduction and Security Questions
- [10:02](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=602) SBOMs and CVE Databases
- [21:04](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=1264) Securing IoT Devices and Mutual TLS
- [25:10](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=1510) Raspberry Pi Reliability and SD Cards
- [32:36](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=1956) Threat Modeling and Attackers
- [33:49](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=2029) Safety vs. Security and Cloud Risks
- [1:01:49](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=3709) Learning Security and CTFs
- [1:05:52](https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers#t=3952) Personal Safety and Community

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Connected products & IoT](https://hardwarepodcasts.com/topic/connected-products-and-iot)
- [Sourcing & supply chain](https://hardwarepodcasts.com/topic/sourcing-and-supply-chain)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)

## Most relevant to

early-stage companies

## Mentioned

- OWASP (company)
- CVE (other)
- CISA (company)
- NIST (company)
- CHEST (company)
- Ubiquiti (company)
- Raspberry Pi (product)
- AWS Greengrass (product)
- Microcorruption (other)
- SANS Holiday Hack Challenge (other)
- Stop the Bleed (company)

## Related episodes from other shows

- [Biggest Firmware Vulnerabilities & How to Fix Them | NetRise's Thomas Pace | Internet of Things Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2023-01-26-biggest-firmware-vulnerabilities-how-to-fix-them-netrises-thomas-pace-internet-o) (IoT For All Podcast)
- [#008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders](https://hardwarepodcasts.com/podcast/coredump-sessions/2025-05-13-008-navigating-the-changing-iot-security-landscape-a-survival-guide-for-product) (Coredump Sessions)
- [Embedded Cybersecurity Basics with Jacob Beningo](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2022-02-02-embedded-cybersecurity-basics-with-jacob-beningo) (The Pragmatic Embedded Podcast)
- [#000: How New IoT Security Regulations Will Shape the Industry's Future](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-09-17-000-how-new-iot-security-regulations-will-shape-the-industrys-future) (Coredump Sessions)
- [Breaking Embedded IoT Systems | Ken Munro, Partner at Pen Test Partners | #IoTMakers E036](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-08-07-breaking-embedded-iot-systems-ken-munro-partner-at-pen-test-partners-iotmakers-e) (IoT For All Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2025-11-27-515-script-boomers. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.