Hardware Podcasts

Open Source Firmware

Oxide and Friends · 31 Oct 2022 · 1h 24m · Episode 33

What this episode covers

Bryan Cantrill and Adam Leventhal of Oxide Computer Company discuss the Open Source Firmware Foundation with founders Christian Walker and Philipp Deppenwiese of 9elements. They explore the history of the Open Source Firmware Conference (OSFC), the industry shift from proprietary to open source firmware driven by security concerns like Spectre and Meltdown, and the technical challenges of dealing with binary blobs in SoCs. The conversation highlights how customers like HPE are using purchasing decisions to enforce open source firmware, accelerating the transition in the hardware industry.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Oxide Computer Company, 9elements, HPE, Intel, AMD, Google, Facebook, AMI, Linux Foundation
Products
Kubernetes
Also
Open Source Firmware Foundation, Open Source Firmware Conference, Spectre, Meltdown, Cobalt, CNCF

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 57m

    342: That Girl's Brain

    Jessie Frazelle, Co-Founder and Chief Product Officer at Oxide Computer, explains how the company builds open-source, rack-scale servers for enterprises by adopting hyperscaler-style hardware design. She details the decision to open-source firmware and hardware to eliminate vendor finger-pointing and security vulnerabilities inherent in proprietary BMCs. The discussion covers their use of Rust for firmware and control plane software, power efficiency metrics like PUE, and the challenges of deploying high-density compute in traditional colocation environments.

    Embedded firmwareSecurity & privacy
    7 chapters

  • Embedded.fm · 1h 05m

    479: Make Your Voice Heard

    Carles Cufí, an open source software engineer at Nordic Semiconductor, discusses the company's strategic shift to Zephyr and the development of the nRF Connect SDK. He explains the architectural decisions behind maintaining a downstream SDK, including the use of binary blobs and proprietary licensing, to balance open-source collaboration with commercial control. Cufí also provides guidance for developers on navigating Zephyr's steep learning curve, highlighting resources like the Memfault 'Practical Zephyr' series, Nordic's DevAcademy, and the community Discord server.

    Embedded firmwareStarting a product company
    9 chapters

  • The Amp Hour · 57m

    Finding Hardware Flaws with Laura Abbott

    Laura Abbott, an engineer at Oxide Computer, discusses her accidental discovery of a buffer overflow vulnerability in the ROM update mechanism of the NXP LPC55S69 microcontroller while working on Oxide's server root of trust. She explains how Oxide is rebuilding the server from the ground up with a focus on hardware security, utilizing their open-source operating system Hubris and the Rust programming language to mitigate risks like memory safety issues. The conversation covers the architecture of the server's secure components, including the service processor and TrustZone-M, as well as the challenges of remote hardware debugging and contributing to the Linux kernel community.

    Security & privacyMicrocontrollers & dev platforms
    6 chapters

  • The Amp Hour · 1h 06m

    Be Tidy

    Hosts Dave Jones and Chris Gammell discuss the Open Source Hardware Association's new certification program, debating its potential to formalize or fracture the community. They also analyze the industry consolidation triggered by Dialog Semiconductor's acquisition of Atmel, noting the shrinking number of chip manufacturers. The conversation touches on the ethical implications of the Volkswagen emissions scandal and the bankruptcy of the innovation platform Quirky.

    Open-source hardwareChips, FPGAs & semiconductors
    6 chapters

  • IoT For All Podcast · 59m

    How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027

    Terry Dunlap, Co-Founder & CEO of ReFirm Labs, explains how his background in offensive cyber operations at the NSA led to the creation of a platform for proactive IoT firmware security. He details the discovery of hard-coded credentials in IoT devices that enabled the Mirai botnet and discusses how low-cost manufacturers often ignore security until faced with legal liability. Dunlap highlights ReFirm Labs' work with telecom providers like AT&T and Charter to vet firmware before deployment, and explores emerging markets like cyber insurance and automotive security, including a demonstration of vulnerabilities in an OBD-II dongle.

    Security & privacyEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Oxide and Friends. The episode itself belongs to its publisher.