Top all-time · #6740
9elements Cyber Security
Company blog · 9esec.io/blogsecurityhardware
9elements Cyber Security is the company blog at 9esec.io, writing about security and hardware. Since 2019, 11 different Hacker News readers have linked it 14 times, most often “Open source cache as RAM with Intel Bootguard”. No feed was found, so read it on the site itself.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN readers link 9elements' security blog for firmware and boot-flow material, such as cache-as-RAM and hardware root-of-trust posts, plus coverage of an open-source firmware conference.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
With our expertise we create security solutions which are robust and easy to use, leveraging leading open source technology.
Most-linked posts?
- Open source cache as RAM with Intel Bootguard2 people · 2 mentions · first linked 2021-06-26
What Hacker News says?
Sure! coreboot + LinuxBoot (with u-root) in the integrity-protected SPI flash memory, which then netboots (download and kexec) a Linux system. All artifacts need to be reproducible. For the CT Log probably trillian. As for choosing this board, I alluded to it in a post down below. Note that I'm not a firmware expert though. Support for x86 was obviously already there, as well as for the microarch if I recall correct…
Comment linking /
on “Open-source firmware”Submitted First modern coreboot server platform as a story · 133 points
HN discussionHi Andrew! Thank you. I definitely took notice when PIA followed our lead and decided to donate to WireGuard as well. I suspect that was your initiative? As far as innovation goes we published our vision for the VPN industry a few months ago. It's transparent and independently auditable VPN servers, through the use of System Transparency: https://mullvad.net/en/blog/2019/6/3/system-transparency-fut... If you are int…
Comment linking /
on “Open-source firmware”Submitted Intel Trusted Execution Technology, Open-Source Now as a story · 39 points
HN discussionIf you want some reading about boot flow, see e.g. https://www.coreboot.org/images/2/23/Apollolake_SoC.pdf https://blogs.coreboot.org/blog/2019/07/17/gsoc-how-to-run-c... https://9esec.io/blog/open-source-cache-as-ram-with-intel-bo... The TLDR is that you need to get DRAM running before you can use it (e.g. by poking at DRAM controller's registers until it knows how to talk to your stick of RAM reliably and at a com…
Comment linking /blog/open-source-cache-as-ram-with-intel-bootguard/
on “So you want to build an embedded Linux system? (2020)”Submitted Next Generation Coreboot Server Platform as a story · 2 points
HN discussionThat hasn't been true for a long time, unfortunately. https://9esec.io/blog/hardware-assisted-root-of-trust-mechan...
Comment linking /blog/hardware-assisted-root-of-trust-mechanism-and-coreboot-internals/
on “What Happens When a CPU Starts”Submitted VMBoot Proof of Concept as a story · 1 points
HN discussionIt is complicated. AMI sells a bmc software stack, https://www.ami.com/megarac/ Intel and small manufacturer were unhappy, about always paying the ami tax. So intel created openbmc, as a hedge against ami's monopoly for small manufacturers. I have heard Openbmc has user from facebook, google, ibm, bytdance, and ali. Dell owns their own stack in idrac, I have heard most of their systems are nuvoton based. I am suspec…
Comment linking /blog/coreboot-on-the-asrock-e3c246d4c/
on “Reverse engineering Dell iDRAC to get rid of GPU throttling”Submitted Open source cache as RAM with Intel Bootguard as a story · 1 points
HN discussionOpen Source Firmware Conference 2019 - Talks, Hackathon and more: https://9esec.io/blog/open-source-firmware-conference-2019-t...
Comment linking /blog/open-source-firmware-conference-2019-talks-hackathon-and-more/
on “Open Source Firmware Conference”Submitted The Future of Open-Source Firmware on Server Systems as a story · 1 points
HN discussionSubmitted Open-Source Firmware for OCP Servers as a story · 1 points
HN discussionSubmitted First modern coreboot server platform as a story · 1 points
HN discussion
