Watch and track your favorite playlist.
Curated by: The Linux Foundation (287 videos)
Don't miss out! Join us at the next Open Source Summit in Seoul, South Korea (November 4-5). Join us at the premier vendor-neutral open source conference, where developers and technologists come together to collaborate, share knowledge, and explore the latest innovations and advancements in open source technology. Learn more at https://events.linuxfoundation.org/ Bootloaders Under Fire: Real-World Threats and Practical Defenses - Ahmad Fatoum, Pengutronix Bootloaders play a critical role in securing embedded systems, especially when implementing verified boot. But while much attention goes into the cryptographic boot chain and run-time security, other parts of the bootloader are often overlooked — leaving a key component of the system exposed. This talk outlines practical steps to harden a bootloader against different real-world threats. Topics include identifying security-critical functionality, avoiding common pitfalls, slimming down the TCB and what kinds of hard- or software misconfiguration can silently undermine your defenses. Along the way, we’ll use barebox as a practical example to show complementary approaches — like applying fuzzing to core logic, adding runtime hardening, and securely handling unlock scenarios — as well as how these could have mitigated a number of recently reported vulnerabilities. Attendees will learn how to reduce risk during early system startup and improve the overall security posture of their embedded systems.