0:00-57:07
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Welcome Laura Abbott of Oxide Computer!
- Laura will be giving a talk at the upcoming Hardwear.io conference in Santa Clara about the (second!) vulnerability she found in the LPC55S69
- Oxide servers are built to be secure from the ground up.
- Root of trust
- The vulnerability Laura found was a buffer overflow in the firmware update mechanism of the LPC55S69.
- TPM
- Cortex M33
- Trust Zone M
- Service Processor - baseband management controller
- What does a server board look like?
- Power management
- Their customer Root of Trust OS is called Hubris
- Open compute project
- Many of the projects at Oxide are programmed in Rust (programming language)
- Memory unsafe stuff
- How do you know rust will run on a part? You can see if there is a "crate" available for the part (Rust installer/package manager)
- Writing updates for processors
- How often does firmware get update on servers?
- Host processor talks to management network onboard, it delivers firmware images to the lower layers.
- What is a Root of Trust task that it might do on a daily basis?
- Laura explained some of the challenges of working remote on hardware
- Laura moved from software into security/hardware. Perviously she had been doing kernel development.
- She is still a Technical Advisory Board Member at the Linux Foundation
- Getting started with kernel
- Follow Laura on Twitter at @openlabbott
Laura Abbott
twitter.comOxide Computer
oxide.computerHardwear.io conference
hardwear.ioOxide servers
oxide.computerRoot of trust
dell.comTPM
en.wikipedia.orgCortex M33
developer.arm.comTrust Zone M
arm.comService Processor - baseband management controller
docs.oracle.comTheir customer Root of Trust OS is called Hubris
oxide.computerOpen compute project
opencompute.orgRust (programming language)
rust-lang.orgMemory unsafe stuff
doc.rust-lang.orgcrate
crates.ioTechnical Advisory Board
linuxfoundation.org