More Secure Bootstrap Problems and Solutions

No ratings

Presented at bsideswinnipeg 2017 by

Mark is still obsessed with what he calls secure bootstrap problems: 1) how do you know you're actually running a desired system and program build? and 2) how do you know a compiled program matches source? The latest state of the art will be reviewed, possibly including diverse double-compiling, Heads (Trammell Hudson), Joanna Rutkowska papers, reproducible builds, and non x86 prospects for owner-controlled computing. Mark is a Winnipeg-based IT double-threat (ops and dev) who works at the University of Winnipeg Library. He's a Bachelor of Computer Science graduate (University of Manitoba 2006) and Linux Foundation Certified Engineer (LFCE). Mark spoke at BSides Winnipeg 2013 and 2015.