Had fun in at #OSSSummit in Tokyo yesterday demonstrating a TPM interposer attack obtaining the systemd cryptenroll boot keys

https://sched.co/1jKCe

And also explaining how the new Linux Kernel TPM patches can help defeat this

For those who asked, my python3 interposer designed to steal the keys is here:

https://git.kernel.org/pub/scm/linux/kernel/git/jejb/tpm2-interposer.git/

Today is the start of the Open Source Summit Japan
October 28-29
Tokyo, Japan

Japan's leading open-source conference, where technologists and industry leaders collaborate and share insights.

Face-to-face problem-solving and discussions
Discover innovations from industry leaders
Learn about the latest trends in open technologies
Explore career opportunities with top tech companies

https://events.linuxfoundation.org/open-source-summit-japan/

Ryan Waite from Microsoft delivers a keynote on "Improving #OSSSecurity Through Collaboration." He discusses Microsoft's collaborative efforts with the OpenSSF community such as S2C2F and future work in software supply chain management. #OSSSummit

Day 2 - Willkommen! Explore the #OSSSummit Europe agenda and mark your must-see security talks. We've highlighted a few can't-miss sessions for you. Stop by our booth to meet the OpenSSF community and check out live project demos! https://openssf.org/blog/2024/09/13/must-attend-sessions-at-soss-community-day-eu-and-open-source-summit-europe-2024/

Join David and Bart from Python Hardening Working Group as they present a demo on the Python Secure Coding Guide. Discover this valuable resource and learn how to get involved with the SIG!

Join us for a GUAC 101 demo session at our booth, featuring Michael Lieberman from 1:30-2:30 CEST!
#OSSSummit

Hype vs. Reality – Linus Torvalds, in conversation with Dirk Hohndel, discusses how maintainers can find long-term projects and discover their passion by stepping outside their comfort zones.

“#OpenSource communities today are much better off…Yes, there are technology layoffs, and they seem to be very cyclical, and it's not necessarily always a nice industry to be in…at the same time, I feel like #opensource is doing very well. People take #opensource for granted now, in a way that they absolutely did not just two decades ago.” Linus Thorvalds #osssummit

“I have been doing this for literally a third of a century now, and I'm still surprised by the fact that we're doing very core development, like half the stuff I've merged,” Linus Thorvalds #osssummit #linux

Happening now: We're live at #OSSSummit Europe 2024! Gabriele Columbro from FINOS and Linux Foundation Europe kicks off the event with the Welcome & Opening Remarks.

#OSSSummit and #SOSSCommunity Day EU are next week! Check out some session highlights from the OpenSSF community that you won’t want to miss. Visit our booth at the Solutions Showcase on Level 0, GS18. Connect with our community members and explore our projects through demos, including GUAC, Python Hardening, protobom, bomctl, and more.

https://openssf.org/blog/2024/09/13/must-attend-sessions-at-soss-community-day-eu-and-open-source-summit-europe-2024/

I'm excited to speak at Open Source Summit Europe 2024 soon — come to listen about documentation templates: is it a helpful aid, or sometimes they might be an overkill https://osseu2024.sched.com/event/77d9f9f9f39fc515b0d3ae22e9ceb7b6
@sched
#osssummit #thegooddocs #templates

Learn how Chapel simplifies #GPU parallel programming across multiple vendors using #OpenSource technologies.

Watch the recording of Jade Abraham's talk at #OSSSummit here!

https://www.youtube.com/watch?v=5-jLdKduaJE

Giving my talk later this morning on Wide Review in #Standards, heavily leaning in on #Ethics and #HumanRights. Then it's back home, finally, after 2 weeks on the road. https://sched.co/1aBPU #ossna #OpenSourceSummit #osssummit

Next Thursday at #EmbeddedOSSummit in Seattle, don't miss my colleague's Julian Bouzas presentation on #WirePlumber smart filters! There is also going to be a live stream, in case you are not attending in person.

Learn more at: https://eoss24.sched.com/event/1aBG9

who will i see at #OSSummit #osssummit in #seattle?

Here's a weekend read: Federal suppliers now have a deadline for #softwaresupplychainsecurity self-attestation, but loopholes linger and focus on #SBOMs has declined.

Also mentioned: #OSSSummit and #NIST guidance on securing #CICD pipelines.

#cybersecurity #CISA

https://www.techtarget.com/searchitoperations/news/366573974/CISA-software-supply-chain-security-form-omits-SBOMs