coreboot Uncovered: BIOS Security, Supply Chain, and Vulnerabilities with Matt DeVillier and David Hendricks

Nerding Out With Viktor

In this episode of "Nerding Out with Viktor," join Viktor as he delves into the world of coreboot, an open-source BIOS technology, alongside esteemed guests Matt DeVillier (Mr. Chromebox) and David Hendricks. Together, they explore the intricacies of coreboot, its applications in Chromebooks and server environments, and its significance in securing firmware through Secure Boot.

The conversation navigates critical topics like supply chain security, emphasizing transparency and control in firmware development, and introduces Software Bill of Materials (SBOMs) as a means to ensure firmware integrity and trust. Viktor's guests share their experiences with coreboot, highlighting its potential for extending the lifespan of hardware and promoting sustainable computing practices.

As they discuss the challenges and benefits of transitioning to coreboot, Matt and David shed light on the importance of early engagement with Original Design Manufacturers (ODMs) and the value of consulting services. With a focus on RISC-V in the open hardware field and coreboot's role in this evolving area, this episode offers a comprehensive understanding of coreboot, its impact on technology, and its vision for the future of BIOS technology.

Useful Resources

• Discover more about coreboot, including consultant links (coreboot IBVs), hardware vendors using coreboot, and extensive documentation at coreboot's homepage.
• Explore MrChromebox.tech for Matt DeVillier's custom distribution of coreboot.
• Access Converged Security Suite, a suite of tools designed for provisioning Bootguard, enhancing the security of your devices.
• Utilize goswid, a tool for generating Software Bill of Materials (SBOM) within coreboot, ensuring firmware transparency and integrity.

]]>