veyepar: Firmware security, why it matters and how you can have it

Author(s):	Matthew Garrett
Location	C1
Date	jan Wed 23	Days Raw Files
Start	13:30	First Raw Start	13:11
Duration	0:45:0	Offset	0:18:36
End	14:15	Last Raw End	14:41
Chapters	00:00 0:11:00 0:41:00
Total cuts_time	45 min.

https://2019.linux.conf.au/schedule/presentation/110/
raw-playlist raw-mp4-playlist encoded-files-playlist host public tweet mp4 svg png

assets release.pdf Firmware_security_why_it_matters_and_how_you_can_have_it.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

A system is only as secure as the least secure component it depends on. Hardening the kernel is a vital part of developing a secure operating system, but if the firmware underneath the kernel is insecure then attackers have an opportunity to sidestep your security and compromise you anyway.

Firmware security research is a rapidly growing field, but the wider world is unaware of a lot of the output. Over recent users we've seen vulnerabilities involving exploitation of code running in system management mode, taking advantage of firmware-level hardware initialisation scripts run on resume from suspend, and even compromise of the management engine - an entirely separate computer that lives inside your chipset.

There's a huge amount of work being done to improve this, but you probably haven't heard about it. This presentation will cover how the state of the art is shifting, along with a discussion of how much of this applies to projects such as Coreboot and Libreboot and whether it's possible to obtain the same level of security without compromising the freedom to run whatever you want on your system.

Comment:

production notes

2019-01-23/14_11_24.ts Apply: 14:15:31 - 14:26:46 ( 00:11:15 ) S: 14:11:24 - E: 14:41:23 D: 00:29:59 (Start: 247.0) (End: 922.0) show more...

vlc ~/Videos/veyepar/lca/lca2019/dv/c1/2019-01-23/14_11_24.ts :start-time=0247.0 --audio-desync=0

	Raw File	Cut List
	14:11:24		seconds: 247.0 Wall: 14:15:31
Duration	00:29:59
	14:41:23		seconds: 922.0 Wall: 14:26:46
Comments:
mp4 mp4.m3u	dv.m3u	Split: Sequence:: delete