pietrushnic

8 ms·

31.
Heads firmware on your laptop verifies against stealthy tampering(youtube.com)
2 points by pietrushnic 1y ago|0 comments
32.
by pietrushnic 1y ago
Having a supply chain that originates in the EU may be of benefit for some customers.
33.
by pietrushnic 1y ago
Hi, I'm 3mdeb (the company behind Dasharo) Founder. You can find Dasharo's business model explanations in the following resources: 1. Presentation about Dasharo Revenue Sharing and Dasharo Supporting https://www.youtube
34.
by pietrushnic 1y ago
You can ask Tim. Those Berbers sitting without any issues on the GitHub for two years already https://github.com/mithro/x11ssh-f-pcb
35.
by pietrushnic 1y ago
Possibility of runtime exploration of the system which may help in OpenBMC port.
36.
Access BMC UART on Supermicro X11SSH(github.com)
64 points by pietrushnic 1y ago|16 comments
37.
3mdeb Carries Out Experimental Port of AMD OpenSIL to Zen 1 Platform(phoronix.com)
1 points by pietrushnic 1y ago|0 comments
38.
Coreboot with AMD OpenSIL on first gen Zen demo(youtube.com)
5 points by pietrushnic 1y ago|0 comments
39.
48GB RTX 8000 vs. 3090s for Local LLMs(hardware-corner.net)
5 points by pietrushnic 1y ago|0 comments
40.
Hydroph0bia – SecureBoot bypass for UEFI-compatile firmware based on Insyde H2O(coderush.me)
4 points by pietrushnic 1y ago|0 comments
41.
TrenchBoot AEM gains support for UEFI installations(blog.3mdeb.com)
2 points by pietrushnic 1y ago|0 comments
42.
Dual RTX 5060 Ti 16GB vs. RTX 3090 for Local LLMs(hardware-corner.net)
14 points by pietrushnic 1y ago|5 comments
43.
Negotiating PoE+ Power in the Pre‑Boot Environment(roderickkhan.com)
220 points by pietrushnic 1y ago|71 comments
44.
by pietrushnic 1y ago
Thanks for posting, 3mdeb Founder here. To some extent, it is known that Root of Trust provisioning tooling for ARM SoC vendors is problematic. Proprietary, closed source, with documentation available only in Chinese. We did that for many A
45.
by pietrushnic 3y ago
There is continuation of OpenSecurityTraining project https://ost2.fyi/
46.
by pietrushnic 3y ago
IUUC Xeno's goal was to create a taxonomy for security topics. If you will take a look here: https://ost2.fyi/System%20Security.html You can find a bigger plan showing the relation between various numbers of courses. O
47.
by pietrushnic 3y ago
Thanks for the feedback about the accent. I understand that it can add an unnecessary layer of complexity to content consumption. I will pay special attention to improving it in upcoming classes, but there are some limits to what I can do.
48.
by pietrushnic 3y ago
I'm pleased that the course I recorded (with massive support from 3mdeb colleagues) and contributed to, OpenSecurityTraining2, made its way here. It is an excellent opportunity to introduce myself and engage with you. I'm Piotr Kr
49.
by pietrushnic 3y ago
I'm not a RISC-V expert, primarily relying on open-source firmware community knowledge and the opinion of such figures as Ron Minnich, but AFAIK, most firmware for production RISC-V deployments is closed-source, so we can't say if
50.
by pietrushnic 3y ago
Linux is important but FreeBSD is the key to heart of majority of DYI firewall builders. I'm huge fan of your project and looking for opportunities to get hands on experience with it. I see that support for FreeBSD going in good direct
51.
by pietrushnic 3y ago
No, just from not native English speaker. You mention high performance 10GbE hardware without being precise about CPU architecture or vendor/model of the firewall. Apparently high power non-consumer grade hardware, but such hardware l
52.
by pietrushnic 3y ago
When we did the research for our network appliance customers, we were very interested in NXP. Have you tried to buy Application Solutions Kit from NXP? We faced the problem of not achieving spec performance using NXP reference boards. After
53.
by pietrushnic 3y ago
> I've never seen SMM mode cause down time, nor have I had the non-auditability of the firmware caus me down time. Hyperscalers (OCP) pushing for coreboot and LinuxBoot have probably different experience. AFAIK they hate SMM especia
54.
by pietrushnic 3y ago
> due to obtrusive (SMM mode), non-auditable firmware Let's be honest every architecture has the same problem of parallel "trusted" execution environment, some have even more than one. - ARM TrustZone - POWER SBE - RISC-V
55.
by pietrushnic 3y ago
There is no storage limitation on PC Engines, you can get 1TB mSata and put inside and it should work without problems. Also apu2 and other have SATA port inside [1], there is also SD card slot as well as USB. [1]: https://voidst
56.
by pietrushnic 3y ago
Those are very far from PC Engines: - no ECC - no DRTM - no schematics - no open-source firmware support Trustworthiness of those devices is at least questionable. Today AMD announced [1] Ryzen 5000 with network appliance as target market.
57.
by pietrushnic 3y ago
Most ARM cases would mean a tremendous amount invested in reverse engineering of binary blobs required to configure network and crypto-accelerators. Also, in most cases, it means no support *BSD like OPNsense and pfSense. That leads to full
58.
New Ryzen Embedded 5000 Series Processors for Networking Solutions(amd.com)
2 points by pietrushnic 3y ago|2 comments
59.
by pietrushnic 3y ago
Recently we analyzed the Hardkernel offer in light of OpenSecurityTraining2, and it looks pretty good but is more expensive than UP2. For example, the UP Squared Pro 7000 Series [1] is fascinating. The pros of Hardkernel are open schematics
60.
by pietrushnic 3y ago
Hey HN community! We're excited to share our updated Architecture 4021: Introductory UEFI 2023_v1 course, designed to help you dive into UEFI and PI specifications. With expanded content, new UEFI Variables lectures, and practical exer

More ›