Trammell Hudson
· Summarized
Key takeaways
- Trammell Hudson emphasizes the importance of understanding the hardware-software interface for optimizing computing performance.
- Open-source projects and community contributions are critical to improving and securing firmware in both consumer and enterprise-grade systems.
- Retro computing serves both as a passion and a platform to learn more about historical computing systems, demonstrating how much legacy software persists.
- The need for smart home devices to function securely and independently from the internet is becoming increasingly relevant as more people adopt home automation.
- Maintaining a chain of trust in firmware and hardware is crucial for system security yet presents various challenges that must be addressed collectively.
Summary
Introduction to Trammell Hudson
The episode begins with host Brian Cantrell and Jess Frisell introducing Trammell Hudson, who joins remotely from Amsterdam. Trammell is celebrated for his innovative work at the intersection of hardware and software, including various hacking projects. Brian mentions discovering Trammell's website, TRMM.net, which he praises for its intriguing content.
Career Background & Early Projects
Trammell talks about his early career at Sandia National Laboratories, where he was involved in high-performance computing and helped develop a custom operating system for supercomputers. He shares anecdotes about working on the Intel Paragon supercomputer and creating a lightweight kernel which used minimal memory resources to optimize performance for users.
Understanding Hardware and Firmware
The conversation shifts to discussing the importance of understanding the hardware-software interface. Trammell emphasizes that many capabilities in computing arise from a deep knowledge of how machines work. He elaborates on various experiences from his past involving supercomputers and firmware development, highlighting the need for efficient communication and management of computing resources.
Discussion on Security and Firmware Research
As the discussion continues, Trammell shares insights from his research on hardware security, including topics like the Evil Maid Attack and the vulnerabilities in Trusted Platform Modules (TPMs). He explains how firmware can be inadvertently exposed due to design oversights, and the challenges that arise from boot security standards like the UEFI chain of trust.
Open Source and Community Contributions
The podcast covers Trammell’s contributions to the open-source community, particularly in the domain of firmware and boot management. He discusses projects like Linux Boot and coreboot, aiming for a more open firmware environment. They touch on successful collaborations within the community that redefined how legacy systems can be managed.
Retro Computing Adventures
Trammell shares his passion for retro computing, including his acquisition of vintage machines like PDP-11s. He recounts fascinating stories about restoring these machines and discovering their historical significance, such as finding old tapes with unusual labels like "digitized monkey brains". The importance of sharing knowledge and experiences from these projects is celebrated.
The Future of Home Automation
Towards the end, Trammell discusses his ongoing work in the smart home arena, expressing a desire for devices to operate without internet dependency. He shares thoughts on using technology like Zigbee and highlights projects aimed at giving users more control over their home automation setups while maintaining safety and privacy.
Concluding Remarks and Future Directions
As the episode concludes, Trammell reflects on the challenges of firmware development and securing modern computing systems. He emphasizes a collaborative approach towards achieving digital sovereignty, advocating for user-controlled systems that respect privacy while maintaining security against potential threats.
Sponsors
- Oxide Computer Company · If you're still running on premises, it's because you haven't heard of the cloud. There are really good reasons for running on premises still for security, for strategy, and more. We know that you exist and have hard technical problems we're solving. Come join us at Oxide.computer.
Show notes
You can find Trammell on Twitter at https://twitter.com/qrs, his blog at https://trmm.net/, and his GitHub at https://github.com/osresearch.
Some of the highlights of the show include:
- Sandia National Labs: https://www.sandia.gov/
- Intel Paragon: https://en.wikipedia.org/wiki/Intel_Paragon
- OSF/1: https://en.wikipedia.org/wiki/OSF/1
- Intel i860: https://en.wikipedia.org/wiki/Intel_i860
- Intel Pentium Pro: https://en.wikipedia.org/wiki/Pentium_Pro
- Red Storm: https://en.wikipedia.org/wiki/Red_Storm_(computing)
- RISC architecture is going to change everything: https://www.youtube.com/watch?v=RL9yCWv7NS0&feature=emb_title
- Message passing interface (MPI): https://en.wikipedia.org/wiki/Message_Passing_Interface
- System management mode (SMM): https://en.wikipedia.org/wiki/System_Management_Mode
- Modchips of the State: https://www.youtube.com/watch?v=C7H3V7tkxeA
- Modchips: https://trmm.net/modchips
- Bloomberg Supermicro story: https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies
- SPI flash reader: https://trmm.net/SPI_flash
- spispy flash emulator: https://github.com/osresearch/spisp https://trmm.net/Spispy
- ChromeOS firmware: https://chromium.googlesource.com/chromiumos/platform/firmware/+/e295ff701af589df9eae9f4549792700c4cbe1f3/README.md https://www.chromium.org/chromium-os/developer-information-for-chrome-os-devices/custom-firmware
- Trusted Platform Module (TPM): https://trustedcomputinggroup.org/work-groups/trusted-platform-module/ https://en.wikipedia.org/wiki/Trusted_Platform_Module
- UEFI "Chain of Trust": https://uefi.org/sites/default/files/resources/UEFI%20Forum%20White%20Paper%20-%20Chain%20of%20Trust%20Introduction_Final.pdf
- Evil Maid Attack: https://en.wikipedia.org/wiki/Evil_maid_attack https://trmm.net/Thunderstrike_FAQ#Does_anyone_actually_use_evil-maid_attacks.3F
- TPMGenie: https://github.com/nccgroup/TPMGenie
- Google's Titan Chip: https://2018.osfc.io/uploads/talk/paper/7/gsc_copy.pdf https://trmm.net/OSFC_2018_Security_keynote
- Open Source Firmware Conference (OSFC): https://osfc.io/
- LinuxBIOS: https://www.linuxjournal.com/article/4888 https://www.coreboot.org/
- LinuxBoot: https://www.linuxboot.org/
- Open Compute Project (OCP): https://www.opencompute.org/
- Bunnie's Laptop: https://www.bunniestudios.com/blog/?p=2686
- Open Titan: https://opentitan.org/
- iCE40 FPGA: http://www.latticesemi.com/iCE40
- iCEBreaker FPGA: https://www.crowdsupply.com/1bitsquared/icebreaker-fpga
- Project Trellis: https://github.com/SymbiFlow/prjtrellis
- nextpnr: https://github.com/YosysHQ/nextpnr
- yosys: https://github.com/YosysHQ/yosys
- UPduino v2.0 FPGA: https://www.tindie.com/products/tinyvision_ai/upduino-v21-low-cost-fpga-board/
- ULX3S FPGA: https://www.crowdsupply.com/radiona/ulx3s
- PiDP-11: https://obsolescence.wixsite.com/obsolescence/pidp-11
- PiDP-8: https://obsolescence.wixsite.com/obsolescence/pidp-8
- Trammell's PDP-11 prject: https://trmm.net/PDP-11
- Digitized Monkey Brains (PDP-11 post): https://www.nycresistor.com/2014/05/15/pdp-11/
- Model ASR33 Teletype: https://trmm.net/Model_ASR33_Teletype
- All of Trammell's Retrocomputing posts: https://trmm.net/Category:Retrocomputing
- Baud rate: https://en.wikipedia.org/wiki/Baud
- Mac SE Easter Egg: https://trmm.net/Mac-SE_Easter_Egg
- Zigbee: https://trmm.net/Ikea https://zigbeealliance.org/
- Magic Lantern firmware: https://trmm.net/Magic_Lantern_firmware
- Home Assistant (Open Source): https://www.home-assistant.io/ https://github.com/home-assistant/home-assistant
- Node-RED: https://flows.nodered.org/
- MicroPython: https://micropython.org/ https://github.com/micropython/micropython
- Mirai Webcam Vulnerability: https://www.wired.com/2016/12/botnet-broke-internet-isnt-going-away/
- Trammell's research on Bootguard: https://trmm.net/Bootguard
- Rust on the Teensy: https://branan.github.io/teensy/
- Oreboot: https://github.com/oreboot/oreboot ht...
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account