hackertube.io

Replace Your Exploit-Ridden Firmware with Linux - Ronald Minnich, Google

The Linux Foundation · talk · Watch on YouTube

Security & hackingLinux & open-source ecosystemsOperating systems & kernels

What it is

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

Why Hacker News recommends it

Recommended as the go-to talk on firmware security risks, Intel ME, and why replacing UEFI with Linux speeds up and hardens boot.

  • 6 people recommended it
  • 4 different months
  • 2 strong recommendations
  • first 2017, last 2023

What HN commenters said

  1. “Absolutely fantastic video from a google engineer”

    How Google replaced UEFI with Linux so Dell servers boot in 20 seconds.

    SEJeff, 2017-11 · Strong recommendation · in ““We have obtained fully functional JTAG for Intel CSME via USB DCI””

  2. “There's a great talk on the risks posed by the capabilities of these security coprocessors”

    Great talk on risks of security coprocessors and Google's efforts to neutralize them.

    anonym29, 2023-04 · Strong recommendation · in “GNU+Linux laptops with Libreboot preinstalled, based on coreboot”

  3. “IMO its a solid 30 minute investment.”

    Talk where the Minix-in-Intel-ME fact was first heard; worthwhile 30 minutes.

    mmcclellan, 2017-11 · Recommendation · in “An Open Letter to Intel”

  4. “gives a nice overview of their efforts to replace parts of Intel ME and UEFI with Linux”

    Overview of replacing Intel ME and UEFI parts with Linux for security.

    jjevanoorschot, 2017-11 · Recommendation · in ““We have obtained fully functional JTAG for Intel CSME via USB DCI””

  5. “This talk helped me”

    Clears up confusion about vPro, AMT, BIOS, UEFI and trusted boot.

    watersb, 2018-07 · Recommendation · in “Intel patches new ME vulnerabilities”

  6. “Coreboot (38m)”

    One of many talks listed for visual learners on how computers boot.

    ignoramous, 2023-03 · Recommendation · in “Ask HN: Where can I find a primer on how computers boot?”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: uefi, intel me, coreboot, linux boot, firmware

Also recommended by the same people