Open Source Firmware - oSC19
1 like394 views
Daniel Maslowski introduces the first Open Source Firmware Conference in Erlangen, Germany, highlighting its key features like the participation of ~200 individuals and sponsorship from OpenSUSE. The document addresses the challenges and issues related to firmware updates among vendors, emphasizing the importance of open source firmware projects like U-Boot, Coreboot, and Linuxboot for security and functionality in embedded devices. It also encourages collaboration within the open source firmware community and invites participants to future events.
Open Source Firmware - oSC19
- 1. Open Source Firmware Daniel Maslowski
- 2. Introduction
- 3. Who I am Hi, I’m Daniel aka OrangeCMS aka CyReVolt! :) ▶ web developer ▶ security background ▶ hacking on many things ▶ just got started with firmware ▶ I like turtles
- 4. Thank you!
- 5. First Open Source Firmware Conference (OSFC) ▶ Erlangen, Germany ▶ ~200 participants ▶ 2 days of talks ▶ 2 tracks (main + security) ▶ 2 days of workshops ▶ openSUSE was among the sponsors
- 6. Firmware
- 7. Firmware is everywhere Embedded devices ▶ SoC Laptops ▶ BIOS/UEFI (host CPU) ▶ ME (coprocessor) ▶ GbE ▶ EC
- 8. Vendor Firmware fwupd/LVFS ▶ 114 vendors listed ▶ platform is growing and vendors push their updates
- 9. Issues ▶ continuous updates are a requirement ▶ firmware updates depend on vendors ▶ vendors do not typically ship updates too often ▶ quality, updates may brick devices https://blog.scaleway.com/2018/a-look-from-behind-the-open-source-bios/
- 10. Vendors
- 11. Supply Chain
- 12. Politics Warning: may contain traces of blobs ▶ a lot of code and necessary knowledge is kept proprietary ▶ documentation on ECs, Super I/O and other chips ▶ board schematics ▶ firmware for certain chips, FSP, VGA Option ROM, … ▶ proprietary vendors implement UEFI, which is inherently complex
- 13. Security Hardware attacks are increasing in research ▶ Rowhammer ▶ Spectre ▶ Meltdown Intel ME CVEs https://mjg59.dreamwidth.org/48429.html
- 14. Firmware, Kernel and the Rings on x86 ▶ -3: ME ▶ -2: SMM / UEFI kernel ▶ -1: hypervisor ▶ 0: kernel ▶ 3: userspace https://blog.jessfraz.com/post/why-open-source-firmware-is-important-for- security/
- 16. U-Boot https://www.denx.de/wiki/U-Boot ▶ supports multiple architectures ▶ more than 1000 boards ▶ powers many embedded devices, such as SBCs and routers ▶ initializes hardware ▶ can directly boot a Linux kernel ▶ can run multiple other payloads
- 17. coreboot https://coreboot.org/ ▶ similar to U-Boot ▶ supports many boards and multiple architectures ▶ can directly boot a Linux kernel or run other payload ▶ ported to multiple older Thinkpads ▶ used for Chromebooks by Google ▶ now also applied to servers ▶ popular among hackers
- 18. LinuxBoot https://www.linuxboot.org/ ▶ announced in January 2018 ▶ remove overhead from bootloaders ▶ Linux provides device drivers and networking ▶ can be run from UEFI, U-Boot, or coreboot https://www.phoronix.com/scan.php?page=news_item&px=LinuxBoot-OSFC- 2018-State
- 19. Equipment
- 20. Screwdrivers
- 21. Magnifying Lens
- 22. Test Clip
- 23. Programmer
- 24. Tooling ▶ host toolchain ▶ project toolchain ▶ extra utilities for creating images etc ▶ flash utilities, e.g., flashrom
- 25. Start hacking
- 26. coreboot / QEMU Build your first image and run it in an emulator
- 27. Disassemble all the Devices!
- 28. XMG C404 (Gigabyte P34v2) coreboot port (WIP) Works ▶ RAM ▶ Video (blob only) ▶ keyboard and touchpad ▶ Bluetooth ▶ WiFi ▶ USB ▶ suspend / resume Needs work ▶ Embedded Controller (runs hot) ▶ ACPI (lid close doesn’t trigger S3) https://github.com/orangecms/coreboot/tree/gigabyte-p34v2 https://gist.github.com/orangecms/b6a8f036a30b7ac3b42c30c35fa295b4
- 29. Call for Action
- 30. Get OEMs on Board https://www.tuxedocomputers.com/ https://www.schenker-tech.de/ https://www.xmg.gg/
- 31. Integrate Firmware Upgrades in OS Distros ▶ zypper up firmware ▶ build firmware in OBS ▶ run checks on openQA ▶ bring kernel and firmware development closely together ▶ join the Open Source Firmware community
- 32. And now…
- 33. Happy Anniversaries! ▶ U-Boot and coreboot both turn 20 this year
- 34. Invitation Join OSFC 2019 in San Francisco! ▶ https://osfc.io/
- 35. Thanks again!
- 36. Invitation Number 2 Meet 9elements Cyber Security at it-sa! ▶ https://security.9elements.com/ ▶ https://www.it-sa.de