Developers vPub 0xA

To see our schedule with full functionality, like timezone conversion and personal scheduling, please enable JavaScript and go here.
17:00
17:00
5min
Greetings, Agenda
Piotr Król

Welcome to the fifth Dasharo User Group meeting, where we'll kick off with an opening talk that outlines today's agenda, sets the stage for insightful discussions, and warmly welcomes both new and returning members to our growing community.

Dasharo User Group #5
Dasharo User Group
17:05
17:05
10min
Dasharo Community Status
Piotr Król

The "Dasharo Community Status" presentation provides numerical data on community activity, including pull requests and upstreaming efforts. It updates Dasharo issues, Matrix space growth and progress, expresses gratitude to active contributors, and highlights the vision for the community's future development and governance.

Dasharo User Group #5
Dasharo User Group
17:15
17:15
20min
Zarhus: Trustworthy Embedded Linux Distro
Piotr Król

"Zarhus: Trustworthy Embedded Linux Distro" is a Yocto-based embedded Linux distribution that aims to simplify enabling advanced hardware security features and performance in the embedded systems market. It extends U-Boot, ARM Trusted Firmware, and Linux kernel to provide support for immutable hardware root of trust, which propertise are preserved through a chain of trust to help provide measured, verified, and secure boot. It also integrates secure storage, secure elements, dTPM, and OP-TEE-based fTPM to support encrypted rootfs. The distribution is currently focusing on Rockchip, NXP SoCs, and x86 architectures and emphasizes its close collaboration with the Dasharo ecosystem for superior testing and certification. This talk invites the community to explore Zarhus' innovative features and contribute to its development.

Dasharo User Group #5
Dasharo User Group
17:35
17:35
45min
Dasharo Community Releases Roadmap
Piotr Król

The presentation outlines Dasharo's comprehensive roadmap, spanning various hardware platforms and integration milestones. It covers the transition from OST2 to Dasharo Support Packages, the community support process, and detailed plans for emulation, network appliances, laptops, desktops, and servers. Highlighting shifts in release dates, new initiatives, and strategic alignment with business goals, the roadmap reflects Dasharo's commitment to security, compatibility, and innovation in firmware development.

Dasharo User Group #5
Dasharo User Group
18:20
18:20
20min
Shameless Plug: New Products in 3mdeb Shop
Piotr Król

"Shameless Plug: New Products in 3mdeb Shop" is more than just an advertisement. It reflects our evolution and demonstrates our unwavering commitment to transparency and the open-source ethos. This presentation is a historical marker for future generations, showcasing our journey through innovation, challenges, and successes. Join us as we explore the products that highlight our progress and dedication to improving the trustworthiness of every device. Something of our offering may be valuable, eye-opening, or so pathetic that you could not resist sending improvement feedback.

Dasharo User Group #5
Dasharo User Group
18:40
18:40
15min
NovaCustom roadmap, strategy, pre-sales and Heads firmware discussion
Wessel klein Snakenborg

NovaCustom is constantly innovating and trying to bring the latest technology available with coreboot firmware that is as open as possible. Hence, we are announcing two new laptop series that will have even more customisation options. Make sure you don't miss it and let's beat the proprietary alternatives together!

But hardware is changing very rapidly, so how can we anticipate on this? I will give a little insight in our new roadmap strategy and share our plans for the rest of this year.

Last February, NovaCustom has released Dasharo coreboot+Heads for the NV41 Series as an alternative firmware version for EDK II (TianoCore). What do you think about it and how can we improve this firmware version? Join the discussion to make a change!

Dasharo User Group #5
Dasharo User Group
18:55
18:55
5min
Closing Remarks
Piotr Król

Final thoughts about DUG and pointers where Dasharo Developers vPub will happen.

Dasharo User Group #5
Dasharo User Group
19:00
19:00
20min
Universal Secure Loader (USL)
Daniel P. Smith

An important question everyone should be concerned with is whether the expected version of the Operating System running was loaded without alteration when it was loaded into memory. A corollary to that is how much code must be trusted in order to trust the answer. When the answer to that is one must trust every piece of code that executed and all devices, the conclusion is there be a better way. To that, the answer is yes, and the solution is Dynamic Launch. This is why even Microsoft is leveraging Dynamic Launch as a cornerstone to their high security platform, Secured Core. The TrenchBoot project seeks to bring ubiquitous access to this capability to the Open Source community.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
19:20
19:20
10min
Q&A

Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
19:30
19:30
30min
Open Discussion

Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
20:00
20:00
20min
Visualizing Device Trees
Daniel Maslowski

Device trees are used to describe a lot of hardware, especially in the embedded world and are used in U-Boot, Linux, Zephyr, and other boot loaders and systems. A device tree enumerates addresses and other attributes for peripherals, hardware decoders, processing cores and external components attached to systems on chips (SoCs) on printed circuit boards (PCBs).
Because device trees are textual, commonly consisting of multiple files and can grow large, roughly 1000 nodes being typical for a common single board computer (SBC), we created a tool to visualize them. The dtvis tool runs in the web browser and is written partly in Rust, building on top of a crate that we forked and keep developing and maintaining within the Platform System Interface project.
In this talk, we present the ideas we have implemented, how we did it, and open ideas and challenges that remain.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
20:20
20:20
10min
Q&A

Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
20:30
20:30
30min
Open Discussion

Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
21:00
21:00
20min
State Considered Harmful: A Discussion Of Stateless Computing And Backdoor Resistantance For Calculating One Time Pads
void

The present talk will present potential methods of attacking a random number generator for use in one time pad cryptosystems and potential methods of mitigating those attacks. The methods of attack presented include potential vectors to backdoor a random number generator to keep previous states and inject malicious states to weaken the strength of said random number generator. The talk will also present a high level architecture of a random number generator that includes mitigations to the relevant attacks.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
21:20
21:20
10min
Q&A

Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
21:30
21:30
30min
Open Discussion

Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
22:00
22:00
20min
Protecting against Persistently Compromised Devices
Demi Marie Obenour

Secure systems, such as Qubes OS and OpenXT, rely on PCI passthrough to isolate devices. However, some devices may have persistent mutable state that is not reset at reboot, creating an attack vector. In this talk I discuss approaches to deal with the problem, and how firmware can work with the OS ensure that attacks based on persistent device compromise are foiled.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
22:20
22:20
10min
Q&A

Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub
22:30
22:30
30min
Open Discussion

Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.

Dasharo Developers vPub 0xA Main Track
Dasharo vPub