Open Source Firmware Track

Open Source Firmware Track

議程簡介

韌體是控制硬體設備的低層軟體，是最為基礎的啟動代碼。我們的基本原則是，透過公開並自由提供韌體的源代碼，開發社群可以合作改進和精進韌體，從而打造更安全、穩定和可靠的韌體，造福於所有人。同時，這也提供了更大的自定義和彈性，使用者可以簡便地修改韌體以滿足其特定需求。目前市場上大部分流通的韌體是閉源和專有的，這把它放在了我們通往自由和開源的前沿。

開源韌體專題旨在舉辦探索自由和開源韌體開發現狀和未來方向的分享會。

本專題接受關於多個主題的演講提案，包括：

  • 開源韌體開發概述和入門介紹：開源韌體的歷史和演變，它的工作原理以及使用開源韌體的好處。
  • 韌體安全性：韌體安全的重要性以及開源韌體如何有助於提高其安全性能。這包括討論閉源韌體可能帶來的潛在安全風險以及開源韌體在緩解這些風險方面的作用。
  • 案例研究和專案展示：成功的開源韌體項目示例以及如何在自己的設備上運行它們。演講者將分享他們開發和使用開源韌體的經驗，以及對開源韌體項目的貢獻。
  • 新的發展方向：關於開源韌體的新專案和倡議，無論是技術上的（如軟體）還是組織上的（如本地社區、會議和標準化工作）。

無論 CPU 架構或廠商如何，開源韌體專題都將接受 BIOS/UEFI、BMC 和嵌入式設備韌體的演講提案。我們將優先考慮項目和架構的多樣性，以確保涵蓋各種主題並具有吸引力。我們還會優先選擇獨立項目而非商業項目，以實現公平競爭。

我們相信，開源韌體專題將與 COSCUP 的現有系統軟體社區主題緊密結合，擴展到特定設備韌體的世界。

This track aims to host talks exploring the current state of the art and future directions of free and open source firmware development. Firmware, the low-level software that controls hardware devices, is often closed-source and proprietary, putting it at the frontier on our way to free and open computing.

The track will accept proposals for talks on a range of topics, including:

  • Overview of open source firmware development and introductory talks: The history and evolution of open source firmware, how it works, and the benefits of using open source firmware for hardware devices.
  • Firmware security: The importance of firmware security and how open source firmware can help improve it. This includes discussing the potential security risks posed by closed-source firmware and the role of open source firmware in mitigating those risks.
  • Case studies and project showcases: Examples of successful open source firmware projects and how to run them on your own devices. Speakers will share their experiences with developing and using open source firmware, as well as contributing to open source firmware projects.
  • New directions and developments: New projects and initiatives with open source firmware, both technical (like software) and organizational (like local communities, conferences, and standardization efforts).

The Open Source Firmware track will accept proposals for BIOS/UEFI, BMC, and embedded device firmware regardless of CPU architecture or vendor. We'll prioritize diversity of projects and architectures to ensure a wide variety of topics and appeal. We will also prefer independent projects over commercial ones to level the playing field.

We believe the Open Source Firmware track will fit well with COSCUP as it touches on the low-level topics of the existing System Software Community but expands into the world of device-specific firmware.

篩選條件

議題

Welcome to the Open Source Firmware Track

TR 412-2 [[ new Date( '2023-07-29 01:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 01:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 01:40:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

Short keynote (10min)

講者

Kai Michaelis

Kai Michaelis

None

Open Source Firmware Track QSVBSK general (30mins)

coreboot + LinuxBoot for Intel Xeon-SP Platforms Why and How

TR 412-2 [[ new Date( '2023-07-29 02:00:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 02:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 02:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注

In this talk, I will introduce coreboot + LinuxBoot development on Intel Xeon-SP platforms. Presenting why and how for this more open source approach for the system firmware for our servers.

講者

Johnny Lin

Johnny Lin

Currenlty I have been working on server BIOS (system firmware) for data centers. I have made some contribution to open source coreboot project and LinuxBoot (u-root) under commit author johnny_lin@wiwynn.com.

Open Source Firmware Track XC7UAD general (30mins)

You, the Problem TPM2 Solves

TR 412-2 [[ new Date( '2023-07-29 02:45:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 02:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 03:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

TPM2 is not about making the computer more trustworthy to you. It is about forcing you, the user, to earn the trust of big corps by tethering your identity to the unique ID of the computer whenever you use a cloud service. The "fairness" of DRM, game anti-cheating, and exam proctoring will be more easily enforced if the big corps have rootkit-like control over everyone's computer. Reverse engineering tools such as virtual machine will not help the user regain total control of his own computer.

講者

ckhung

ckhung

我的部落格之一： 玩具烏托邦

Open Source Firmware Track MG78WL general (30mins)

The overview and future of Open Source FW for server industry

TR 412-2 [[ new Date( '2023-07-29 03:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 03:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 04:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注
  1. The high level introduction of Open Source FW,
    • Open System FW/OpenBIOS with different architectures (UEFI, coreboot, etc..)
    • OpenBMC for all in one of server board and modular design for different devices in Datacenter
  2. How the Open Source FW become major solution for server industry
  3. Current status of Open System FW and OpenBMC for the commercial server
  4. The challenge and things need to be done in future of Open Source FW

講者

Hancock Chang

Hancock Chang

25+ years experience with cross domain skills such as System Solution engineering, product/program management for various product portfolio including PC, Server (For Data Centre and Telco Infrastructure) and Embedded Solution (Automotive and BMC/BIOS), success in server product management through the driect collaboration continuously with various open source communities including OCP, OpenBMC, Linux Foundation, ONF, OSFC.

Open Source Firmware Track MXDBRM general (30mins)

Exploited OSS vulnerability 2022-2023

TR 412-2 [[ new Date( '2023-07-29 05:05:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 05:05:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 05:35:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

Nowadays security incident is increasing more and more. Then lots of vendor/community/institute are making efforts to find vulnerability on software. Not only commercial software, but also OSS is having vulnerability (remember Log4Shell, Dirty Pipe and so on). Then lots of security researchers are reporting vulnerability an d publish it with CVE-ids which is assigned by MITRE. In this session, Kazuki Omo will report recently trends of OSS CVE in 2022-2023. Also show some typical vulnerability PoC and pich up several example for exploite d vulnerability in 2022-2023 incident. And tell how you can catch up those news immediatelly and protect those vulnerability by using OSS product/solution.

講者

Kazuki Omo

Kazuki Omo

Over 20 years experience in Unix/Linux/Windows system and many of Security related product. Working for OSS community over 17 years. Nowadays, Trainer for Threat intelligence, and speaks at lots of public seminar/session.

  • Trainer for Threat Intelligence since 2020.
  • Published SELinux and related security articles from 2004-2022.
  • Maintainer of "LIDS(Linux Intrusion Detection System)".
  • Published "Linux Security textbook" from LPI-Japan.
  • Presentation on openSUSE.Asia Summit 2016 "openSUSE Security with OpenSCAP standard"
  • Presentation on LinuxWorld C&D 2004 Japan "KB1-4 Keynote:Explanation about SELinux"
  • Presentation on OSC 2007 TOKYO Japan "How to to daily operate for SELinux"

Open Source Firmware Track B8AXHU Early Birds Call For Paper - Session

Libreboot : A Gamechanger for traditional BIOS ?

TR 412-2 [[ new Date( '2023-07-29 05:45:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 05:45:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 06:15:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

Almost every system has BIOS firmware. Be it an individual box or enterprise-grade workload Servers. What is the need to change it? current BIOS is the result of so many innovative cycles. so just because it is proprietary firmware and we believe in OpenSource we should change it? In this talk, I will discuss How Firmware changed from time to time? Every time the driver and rationale in the Firmware growth path with the history of the Firmware? The Pace of Firmware improvement is not the same as it was sometimes back! Is it only Cloud or cyber security which has increased multi-variant releases in firmware? Like normal software, can we go for tailored firmware that can really make a direct difference for any business use case? Firmware capabilities should be scoped closely limited to booting the device only or a tailored firmware can aggregate the innovation and can help to solve many problems normal software is struggling with? This talk will have content on Libreboot firmware in terms of a tough journey and great acknowledgment for BIOS replacement.

講者

Preet Sharma

Preet Sharma

Preet is a Solution Architect at NCS-Singapore with 15 years of rich experience in Solutioning, Transformation, and Digitization. Preet has witnessed a revolutionary journey of technologies from dBase to SQL/NoSQL/GraphDB, from Pascal to Python, Onprem to Cloud, waterfall to agile along with multiple Business domain knowledge.

He is always keen to learn and conceptualize new things for better customer experience management. He is a customer-obsessed and collaboration believer.

Open Source Firmware Track XPXNMP general (30mins)

Hackathon Day 1

TR 412-2 [[ new Date( '2023-07-29 06:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-29 06:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-29 08:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注

Get-to-gather Hands On with Open Source Firmware!

講者

Lean Sheng Tan

Lean Sheng Tan

Firmware developer from 9elements. Love electronic instrumental music & frisbee.

Open Source Firmware Track NYFP8X general (30mins)

Advancing the State of the Art for Server BMC

TR 412-2 [[ new Date( '2023-07-30 01:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 01:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 02:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

BMC

講者

Christian Walter

Christian Walter

None

Open Source Firmware Track T9QFQH general (30mins)

Share the Experience of Using Embedded Development Board

TR 412-2 [[ new Date( '2023-07-30 02:55:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 02:55:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 03:25:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

過去幾年，曾因為疫情引起的晶片短缺，導致業者無法生產產品，進而影響到全球工業、車業，甚至是資訊業…等。近期，也因為許多國家的政策考量，需要特別檢視產品的來源。因此，能夠快速變更合適的料件來做開發應用，以提高產品、服務供給端的韌性，是一個重要技能。本次，將分想曾經使用過的晶片(架構)，列出相對應的 toolchain、debug tool 與相關開發經驗。

將說明如何使用 open source toolchain 和 debug tool 進行開發、除錯，並把程式燒錄到 ARM Cortex-M 開發板上。同樣的過程，也可套用到其他晶片的開發板，將實際舉例 ARM Cortex-A 與 RISC-V 32 & 64 Bits 的產品。此外，也會分享送 patch 到 debug tool upstream 的相關互動經驗。

講者

Jian-Hong Pan (StarNight)

Jian-Hong Pan (StarNight)

A software engineer.

Open Source Firmware Track ZKFJVC general (30mins)

Journey on enabling coreboot on Chromebooks

TR 412-2 [[ new Date( '2023-07-30 03:35:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 03:35:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 04:05:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注

分享在coreboot 開發chromebook的經驗

講者

Eric Lai

Eric Lai

Chromebook developer

Open Source Firmware Track SAYQPG general (30mins)

Introduction to Booting RISC-V Linux

TR 412-2 [[ new Date( '2023-07-30 05:30:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 05:30:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 06:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注

RISC-V 平台開機過程的簡介， 簡介過程使用到的軟體專案 (U-Boot, OpenSBI, Linux) ， 以及這些軟體專案所扮演的角色。

講者

梁育齊

梁育齊

晶心科技軟體工程師

Open Source Firmware Track C7JTLG Early Birds Call For Paper - Session

Common Firmware Handoff Design: Universal Payload Specification

TR 412-2 [[ new Date( '2023-07-30 06:10:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 06:10:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 06:40:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] zh-tw
加入行事曆 加入關注 加入關注 已關注

This presentation will provide a brief update on what is Universal Payload Design (UPL), and most importantly the journey there: as the UPL is a cross-projects Firmware Industrial Standard for the first time ever, where Silicon vendors and firmware communities (EDK2, coreboot, U-Boot, LinuxBoot, Slim Bootloader) come together to work on common open specification. We will share the technical part of what UPL is, and the impacts it will bring to open source firmware industry. Then we will share the 1 year journey of how this came together and many roadblocks faced, it would be a valuable sharing for open system firmware community.

講者

Lean Sheng Tan

Lean Sheng Tan

Firmware developer from 9elements. Love electronic instrumental music & frisbee.

講者

Gua Guo

Gua Guo

:)

Open Source Firmware Track PKW3QE general (30mins)

Hackathon Day 2

TR 412-2 [[ new Date( '2023-07-30 07:00:00+00:00' ).toLocaleDateString('ja', {year: 'numeric', month: '2-digit', day: '2-digit'}) ]] [[ new Date( '2023-07-30 07:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] ~ [[ new Date( '2023-07-30 08:00:00+00:00' ).toLocaleTimeString('zh-Hant', {hour12: false, hour: '2-digit', minute:'2-digit'}) ]] en
加入行事曆 加入關注 加入關注 已關注

Open Source Firmware Hands-on and discussion

講者

Lean Sheng Tan

Lean Sheng Tan

Firmware developer from 9elements. Love electronic instrumental music & frisbee.

Open Source Firmware Track WHFWTD general (30mins)