the_panopticon

7 ms·

31.
by the_panopticon 3y ago
AMD seems to be exploring quite a bit of open source firmware lately, including the thread on host firmware https://news.ycombinator.com/item?id=36331394
32.
by the_panopticon 3y ago
always a good read on mathematical writing https://www.mathematik.uni-marburg.de/~agricola/material/hal...
33.
by the_panopticon 3y ago
It looks similar to u-root https://github.com/u-root/u-root , yes, used as part of host firmware. There's a description of u-root in chapter 6 of https://link.springer.com/book/10.1007/978
34.
by the_panopticon 3y ago
what about projects like https://github.com/VerticalResearchGroup/miaow ?
35.
by the_panopticon 3y ago
https://www.intel.com/content/www/us/en/developer/articles/t...
36.
by the_panopticon 3y ago
At least it was just a fine and he avoided having to visit “Club Fed” https://en.wikipedia.org/wiki/ImClone_stock_trading_case
37.
by the_panopticon 3y ago
it has definitely been interesting trying to figure out how to accrete post quantum crypto into existing domains like firmware, too https://uefi.org/sites/default/files/resources/Post%20Quantu...
38.
by the_panopticon 3y ago
I wonder if other organizations like IEEE and its https://ieeexplore.ieee.org/ are next?
39.
by the_panopticon 3y ago
Yes. The ultimate 'portable assembly language' / Swiss Army knife of systems programmers.
40.
by the_panopticon 3y ago
The triple damage is interesting. The founders like Jefferson didn't envision that punitive aspect, I imagine. Instead Thomas J wrote "He who receives an idea from me, receives instruction himself without lessening mine; as he who
41.
by the_panopticon 3y ago
well said. Reminds me of a comment I received from a manager years ago: "This component is great, I haven't heard of any bugs." My retort was: "It's because no one is using it." Fast forward 10 years. Many b
42.
by the_panopticon 3y ago
In the same spirit of this talk, good HN post https://news.ycombinator.com/item?id=38035672 on Terry Tao's use of proof assistants and LLMs to find a paper bug https://terrytao.wordpress.com/2023/1
43.
by the_panopticon 3y ago
Interesting. Luckily the tax is new as of 2022. I heard that income-tax bearing states like CA and OR pursue the tax bill against folks who finally sell equity in a non-tax state if the stock vested while the individual was in the state w&#
44.
by the_panopticon 3y ago
Some of the challenges in adding Rust to EDKII are described in https://cfp.osfc.io/osfc2020/talk/SLFJTN/ . There is some more recent work in this space described in https://microsoft.github.io&#x2
45.
by the_panopticon 3y ago
Yes. That’s one of the reasons we turn on the IOMMU even for boot https://cdrdv2-public.intel.com/671554/intel-whitepaper-usin...
46.
by the_panopticon 3y ago
Yes, "Firmware Bill of Materials" https://uefi.org/sites/default/files/resources/Traceable%20F... has been used.
47.
by the_panopticon 3y ago
As necessity is the mother of invention, Itanium did lead to UEFI, though The Chicken and the Egg The very first effort that is considered a direct ancestor of UEFI technology had a very specific tactical goal. In the course of 1997 people
48.
by the_panopticon 3y ago
All of the training at https://opensecuritytraining.info/Training.html is valuable. Xeno Kovah who set this up originally also hosts a nice timeline of exploit papers https://darkmentor.com/timeline.html , t
49.
by the_panopticon 3y ago
The UEFI spec leverages handles throughout its APIs. The implementations from the sample in 1998 to today’s EDKII at tianocore.org use the address of the interface, or protocol, as the handle value. Easy for a single address space environme
50.
by the_panopticon 3y ago
I was looking just at the boot code. Rockchip has all open source silicon and board code, including the RK3399 https://github.com/coreboot/coreboot/blob/master/src/soc/roc... for memory init.
51.
by the_panopticon 3y ago
I believe the Qualcomm and Mediatek-based ARM Chromebooks have binary blobs.
52.
by the_panopticon 3y ago
Regarding standards, the Terse Executable (TE) is part of the UEFI Platform Initialization Specification https://uefi.org/specs/PI/1.8/V1_TE_Image.html now. From "Beyond BIOS" https://www
53.
by the_panopticon 3y ago
KataOS and Sparrow https://opensource.googleblog.com/2022/10/announcing-kataos-... represent another use of seL4. This time with Rust as services code outside of the provably-correct seL4 c code.
54.
by the_panopticon 4y ago
That's a good book. A few others from Apress include A few books may help include "Building Secure Firmware" https://link.springer.com/book/10.1007/978-1-4842-6106-4 and "System Firmware"