Hardware Podcasts

IoT Device Security throughout a Solution's Lifecycle | Twilio’s Evan Cummack

IoT For All Podcast · 2 Feb 2021 · 31m

What this episode covers

Evan Cummack, General Manager of IoT & Wireless at Twilio, explains how the company applied its developer-first API model to cellular IoT through products like Programmable Wireless, Super SIM, and the acquisition of Electric Imp. He discusses the challenge of 'serviceification' in IoT, citing examples like Pulsa sensors and San Sonio, and introduces Microvisor as a solution to the difficulty of managing device security and OTA updates. Cummack argues that hardware innovation is slowed by the steep climb from general-purpose to single-purpose computing, urging developers to use managed platforms for non-differentiating tasks like certificate management.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Twilio, Electric Imp, Cisco, T-Mobile, Pulsa, San Sonio, Lime
Products
Microvisor, Super SIM, Programmable Wireless, Jasper, Amazon EC2
Also
Trust Zone M

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 12m

    390: Irresponsible At the Time

    Tyler Hoffman, co-founder of Memfault, discusses the challenges of managing firmware updates, device diagnostics, and remote monitoring for millions of IoT devices. He draws on his experience at Pebble and Fitbit to explain why existing cloud platforms are often unsuitable for resource-constrained embedded systems, highlighting the need for secure boot, staged rollouts, and efficient heartbeat reporting. Hoffman details how Memfault’s platform helps engineers detect crashes, track battery life trends, and prioritize bugs by aggregating data from large device fleets. The conversation emphasizes the importance of defensive programming and building robust OTA systems to prevent bricking devices at scale.

    Embedded firmwareConnected products & IoT
    8 chapters

  • Coredump Sessions · 55m

    #019: END-OF-YEAR CELEBRATION: Moments You Loved, Stories You Missed, and 2026 Predictions You Need

    François Baldassari and Chris Coleman, co-founders of Memfault, reflect on the 20th episode of Coredump Sessions, highlighting lessons from guests like Nick Sinas of Oval, Dan Mangum of Golioth, and Chad from Gabb. They discuss the critical importance of Over-the-Air (OTA) updates, the rise of AI-assisted firmware development using tools like Claude and Cursor, and the evolving security landscape for devices from Pebble to modern smart rings. The hosts predict that 2026 will see OTA become a regulatory requirement and AI offload processing to the edge, while emphasizing the need for engineers to adapt to higher-level abstractions.

    Connected products & IoTAI & machine learning
    11 chapters

  • Over the Air · 34m

    Revolutionizing IoT Device Management: Updating the World with Peridio

    Bill Brock, COO, and Justin Schneck, CPO, of Peridio, discuss the challenges of managing IoT device fleets and their platform's approach to device-centric CI/CD. They explain why web development abstractions fail in embedded systems, highlighting the critical need for atomic updates to prevent 'bricked' devices from power failures or poor connectivity. The conversation covers the shift from simple sensors to complex edge AI, requiring collaborative workflows that bridge embedded engineers, data scientists, and web developers. They argue that current cloud providers offer scale but lack the necessary collaboration tools and safety nets for physical device distribution.

    Connected products & IoTEmbedded firmware
    7 chapters

  • Coredump Sessions · 57m

    #002: The secrets to building secure & scalable OTA infrastructure with Nick Sinas

    Nick Sinas, CTO at Oval, and Chris Coleman, CTO at Memfault, discuss the critical importance of Over-the-Air (OTA) updates for connected devices, emphasizing that OTA must be designed into the hardware architecture from day one. They detail the technical requirements for secure, scalable OTA systems, including bootloader design, memory management, and cloud-side cohort rollouts to mitigate fleet-wide risks. The conversation highlights real-world failures, such as breaking future update capabilities due to stack overflow fixes, and stresses the need for rigorous testing, security best practices like signing keys, and fallback mechanisms like dual-bank architectures.

    Embedded firmwareSecurity & privacy
    10 chapters

  • Embedded.fm · 1h 10m

    515: Script Boomers

    Nick Kartsioukas, a Senior Security Engineer, discusses the evolving landscape of embedded system security, emphasizing the critical importance of Software Bill of Materials (SBOMs) and monitoring the Common Vulnerabilities and Exposures (CVE) database. He explains how to secure IoT devices through mutual TLS authentication and hardware roots of trust, while warning against the risks of using complex platforms like the Raspberry Pi in constrained environments. The conversation also covers threat modeling strategies, the crossover between safety and security, and practical advice for engineers to improve their security posture through Capture The Flag (CTF) challenges.

    Security & privacyConnected products & IoT
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.