Developers vPub 0xA
Welcome to the fifth Dasharo User Group meeting, where we'll kick off with an opening talk that outlines today's agenda, sets the stage for insightful discussions, and warmly welcomes both new and returning members to our growing community.
The "Dasharo Community Status" presentation provides numerical data on community activity, including pull requests and upstreaming efforts. It updates Dasharo issues, Matrix space growth and progress, expresses gratitude to active contributors, and highlights the vision for the community's future development and governance.
"Zarhus: Trustworthy Embedded Linux Distro" is a Yocto-based embedded Linux distribution that aims to simplify enabling advanced hardware security features and performance in the embedded systems market. It extends U-Boot, ARM Trusted Firmware, and Linux kernel to provide support for immutable hardware root of trust, which propertise are preserved through a chain of trust to help provide measured, verified, and secure boot. It also integrates secure storage, secure elements, dTPM, and OP-TEE-based fTPM to support encrypted rootfs. The distribution is currently focusing on Rockchip, NXP SoCs, and x86 architectures and emphasizes its close collaboration with the Dasharo ecosystem for superior testing and certification. This talk invites the community to explore Zarhus' innovative features and contribute to its development.
The presentation outlines Dasharo's comprehensive roadmap, spanning various hardware platforms and integration milestones. It covers the transition from OST2 to Dasharo Support Packages, the community support process, and detailed plans for emulation, network appliances, laptops, desktops, and servers. Highlighting shifts in release dates, new initiatives, and strategic alignment with business goals, the roadmap reflects Dasharo's commitment to security, compatibility, and innovation in firmware development.
"Shameless Plug: New Products in 3mdeb Shop" is more than just an advertisement. It reflects our evolution and demonstrates our unwavering commitment to transparency and the open-source ethos. This presentation is a historical marker for future generations, showcasing our journey through innovation, challenges, and successes. Join us as we explore the products that highlight our progress and dedication to improving the trustworthiness of every device. Something of our offering may be valuable, eye-opening, or so pathetic that you could not resist sending improvement feedback.
NovaCustom is constantly innovating and trying to bring the latest technology available with coreboot firmware that is as open as possible. Hence, we are announcing two new laptop series that will have even more customisation options. Make sure you don't miss it and let's beat the proprietary alternatives together!
But hardware is changing very rapidly, so how can we anticipate on this? I will give a little insight in our new roadmap strategy and share our plans for the rest of this year.
Last February, NovaCustom has released Dasharo coreboot+Heads for the NV41 Series as an alternative firmware version for EDK II (TianoCore). What do you think about it and how can we improve this firmware version? Join the discussion to make a change!
Final thoughts about DUG and pointers where Dasharo Developers vPub will happen.
An important question everyone should be concerned with is whether the expected version of the Operating System running was loaded without alteration when it was loaded into memory. A corollary to that is how much code must be trusted in order to trust the answer. When the answer to that is one must trust every piece of code that executed and all devices, the conclusion is there be a better way. To that, the answer is yes, and the solution is Dynamic Launch. This is why even Microsoft is leveraging Dynamic Launch as a cornerstone to their high security platform, Secured Core. The TrenchBoot project seeks to bring ubiquitous access to this capability to the Open Source community.
Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.
Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.
Device trees are used to describe a lot of hardware, especially in the embedded world and are used in U-Boot, Linux, Zephyr, and other boot loaders and systems. A device tree enumerates addresses and other attributes for peripherals, hardware decoders, processing cores and external components attached to systems on chips (SoCs) on printed circuit boards (PCBs).
Because device trees are textual, commonly consisting of multiple files and can grow large, roughly 1000 nodes being typical for a common single board computer (SBC), we created a tool to visualize them. The dtvis tool runs in the web browser and is written partly in Rust, building on top of a crate that we forked and keep developing and maintaining within the Platform System Interface project.
In this talk, we present the ideas we have implemented, how we did it, and open ideas and challenges that remain.
Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.
Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.
The present talk will present potential methods of attacking a random number generator for use in one time pad cryptosystems and potential methods of mitigating those attacks. The methods of attack presented include potential vectors to backdoor a random number generator to keep previous states and inject malicious states to weaken the strength of said random number generator. The talk will also present a high level architecture of a random number generator that includes mitigations to the relevant attacks.
Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.
Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.
Secure systems, such as Qubes OS and OpenXT, rely on PCI passthrough to isolate devices. However, some devices may have persistent mutable state that is not reset at reboot, creating an attack vector. In this talk I discuss approaches to deal with the problem, and how firmware can work with the OS ensure that attacks based on persistent device compromise are foiled.
Q&A session during which all attendees can ask questions regarding the talk/demo/discussion.
Open Discussion signifies a platform where developers, technology enthusiasts, and experts freely share insights, challenges, and innovations related to open-source firmware and technology in a relaxed and informal setting. This format promotes the exchange of diverse perspectives, encourages collaborative problem-solving, and nurtures a community spirit among participants. It enables attendees to delve into technical details, share experiences, and explore new ideas without the constraints of formal presentations, fostering a dynamic environment for learning and networking.