Bootstraping a slightly more secure laptop - TIB AV-Portal

Bootstraping a slightly more secure laptop

00:00

8

Related Material

Chaos Computer Club e.V.

Hudson, Trammell

Formal Metadata

Title

Bootstraping a slightly more secure laptop

Title of Series

Number of Parts

147

Author

Hudson, Trammell

License

CC Attribution 4.0 International:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.

Identifiers

10.5446/43905 (DOI)

Publisher

Chaos Computer Club e.V.

Release Date

Language

Content Metadata

Subject Area

Computer Science

Genre

Conference/Talk

Abstract

Heads is an open source custom firmware and OS configuration for laptops and servers that aims to provide slightly better physical security and protection for data on the system. Unlike Tails, which aims to be a stateless OS that leaves no trace on the computer of its presence, Heads is intended for the case where you need to store data and state on the computer. It targets specific models of commodity hardware and takes advantage of lessons learned from several years of vulnerability research. This talk provides a high level overview of Heads, a demo of installing it on a Thinkpad and a tour of some of the attacks that it protects against.

Keywords

Speech

Text

Image

00:00

LaptopSystem programmingOrdinary differential equationLaptopVideo gameUltraviolet photoelectron spectroscopyOpen sourceInformation securityServer (computing)Mobile appInheritance (object-oriented programming)RootField (computer science)Computer animationLecture/Conference

00:40

Ordinary differential equationBootingSystem programmingComputer wormPhysical systemFirmwareVulnerability (computing)MotherboardSoftwareWindowGroup actionProcess (computing)Lecture/Conference

01:23

ZugriffskontrolleOpen sourceBootingRandom numberEntropie <Informationstheorie>Computing platformMotherboardVirtual machineSoftwareCodeBootingOpen sourceBuildingPhysical systemProjective planeDisk read-and-write headFirmwareCASE <Informatik>LaptopTracing (software)Server (computing)Distribution (mathematics)Lecture/Conference

02:20

FirmwareComputer hardwareVirtual machineQuicksortCodeInformation securityPosition operatorDivisorIntelFirmwareMalwarePatch (Unix)Vulnerability (computing)Software bugLecture/ConferenceComputer animation

03:32

Tablet computerVideoconferencingPhysical systemRootkitHacker (term)MalwareComputer hardwareInformation managementLaptopState of matterTheorySelf-organizationGroup actionSoftware development kitRoutingVulnerability (computing)RootkitOperational amplifierMotherboardHard disk driveNP-hardBootingComputer animationLecture/Conference

04:09

Computer wormRootkitSoftwarePhysical systemVulnerability (computing)AdditionRevision controlOperating systemCASE <Informatik>Patch (Unix)Virtual machineCartesian coordinate system

04:48

BefehlsprozessorSoftwareChainIndependence (probability theory)Software developerService (economics)VacuumCartesian coordinate systemVulnerability (computing)Operating systemVirtual machinePatch (Unix)MereologyFirmwareOpen sourceImplementationMotherboardNetwork topologyIndependence (probability theory)Point (geometry)IntelLecture/ConferenceComputer animation

05:50

Computer wormSoftwareChainIndependence (probability theory)Software developerBefehlsprozessorComputerException handlingOperating systemMultiplication signProduct (business)Patch (Unix)ResultantComputer clusterComputer hardwareFirmwareLecture/ConferenceComputer animation

06:30

Computer wormInterface (computing)Kolmogorov complexityKernel (computing)Operating systemEntire functionSet (mathematics)CodeMultiplication signComplex (psychology)Physical systemSurfaceModule (mathematics)Vector potentialSoftware bugVulnerability (computing)Asynchronous Transfer ModeReal numberComputer animation

07:15

Physical systemState of matterSurfaceVector potentialFirmwareMultiplication signSoftware bugClosed setModule (mathematics)Open sourceConnectivity (graph theory)Vulnerability (computing)SoftwarePatch (Unix)Process (computing)Lecture/Conference

07:58

MeasurementOpen setKernel (computing)Information securitySoftwareBuildingChainPhysical systemInformation securityFreewareDisk read-and-write headGoodness of fitCore dumpKernel (computing)FirmwareBootingKey (cryptography)Virtual machineScaling (geometry)Gene clusterComputer animationLecture/Conference

08:53

Web pageComputerComputer hardwareVirtual machineLocal GroupInheritance (object-oriented programming)ComputerSoftwareGene clusterScaling (geometry)Kernel (computing)BootingState observerVirtual machineBit rateFrustrationLength of stayComputer animation

09:35

Electronic data interchangeRevision controlProjective planeCore dumpGraphical user interfaceLaptopPoint (geometry)Virtual machinePower (physics)BootingFirmwareLecture/Conference

10:22

Software testingRead-only memoryComputer wormLevel (video gaming)Cache (computing)Enumerated typeTable (information)Projective planeCore dumpBootingConfiguration spaceFirmwareBitVirtual machineReal numberLaptopLevel (video gaming)Group actionAsynchronous Transfer ModeFluid staticsSystem administratorComputer wormCodeCache (computing)MeasurementDisk read-and-write headFraction (mathematics)ComputerBlock (periodic table)Run-time systemRootProcess (computing)Figurate numberDynamic random-access memoryGastropod shellData compression2 (number)Bus (computing)Letterpress printingBit rateData managementHydraulic jumpInternet service providerInteractive televisionData recoveryPower (physics)Computer animation

12:25

Executive information systemCache (computing)SCSIMiniDiscZugriffskontrolleBridging (networking)Process capability indexDrill commandsCore dumpInterface (computing)Keyboard shortcutExecution unitMaizeoutputMathematical optimizationPhysical systemCoprocessorEvent horizonTime zoneWärmestrahlungPower (physics)Kernel (computing)BootingInteractive televisionData recoveryPower (physics)Gastropod shellImplementationPhysical systemBootingScripting languageState of matterFile systemFormal languageFunctional (mathematics)Multiplication signPoint (geometry)Link (knot theory)Different (Kate Ryan album)EncryptionRun time (program lifecycle phase)Limit (category theory)Cartesian coordinate systemComputer animationSource codeLecture/Conference

13:08

Kernel (computing)Open sourceNetwork topologyPulse (signal processing)Graph (mathematics)Machine codeFile systemBootingContrast (vision)Cartesian coordinate systemEncryptionOpen sourceSoftware bugDevice driverLevel (video gaming)Revision controlTurbo-CodeSurfaceTablet computerLimit (category theory)Source codeTableLecture/ConferenceComputer animation

14:09

Address spaceConfiguration spaceArrow of timeKey (cryptography)Menu (computing)Online helpBinary fileIntelData storage deviceBefehlsprozessorInclusion mapNetwork topologyInheritance (object-oriented programming)Game controllerFirmwareComputing platformComputer wormPhysical systemMiniDiscComputer-generated imageryKernel (computing)Open sourceSurfaceCore dumpGoodness of fitDevice driverComputer fileRevision controlKernel (computing)System callDisk read-and-write headProjective planeBootingSoftware bugProcess (computing)File systemConnectivity (graph theory)BuildingCASE <Informatik>Cartesian coordinate systemPhysical systemLecture/Conference

15:10

Kernel (computing)Structural loadHypercubeQuicksortDisk read-and-write headSurvival analysisCASE <Informatik>Scripting languageSet (mathematics)MiniDiscWhiteboardGastropod shellGoodness of fitDegree (graph theory)Information securityLecture/ConferenceComputer animation

15:57

Structural loadHypercubeKernel (computing)BefehlsprozessorData modelBuildingBlock (periodic table)Endliche ModelltheorieGoodness of fitAdditionCore dumpInformation securityComputing platformDegree (graph theory)Staff (military)BootingDifferent (Kate Ryan album)Computer animationLecture/Conference

16:36

Execution unitTask (computing)Video gameKeyboard shortcutPlastikkarteOpen sourceEndliche ModelltheoriePhysical systemFirmwareBefehlsprozessorBootingProcess (computing)Virtual machineGame controllerLecture/Conference

17:18

Hacker (term)Computer hardwareLine (geometry)ComputerLaptopAreaComputer wormTable (information)Einstein field equationsVirtual machineData managementMereologySocial classFrustrationMotherboardComputerWritingBootingPersonal identification numberFlash memoryBlock (periodic table)LaptopPhysical systemComputer hardwareRootkitDescriptive statisticsRight angleSystem callAsynchronous Transfer ModeClosed setReading (process)IntelComputer animation

18:59

Physical systemData managementComputer networkPlastikkarteInterface (computing)BefehlsprozessorIntelComputing platformIntercept theoremPeripheralGame controllerGraphics processing unitFunknetzData storage deviceArc (geometry)BefehlsprozessorVirtual machineJava appletBytecodePhysical systemData managementVideoconferencingSemiconductor memoryCAN busProcess (computing)SoftwareKeyboard shortcutCodeLecture/Conference

19:47

Inclusion mapFirmwareOSI modelComputer wormExecution unitEvent horizonCache (computing)Convex hullTable (information)Error messageProcess capability indexMachine codeEmulationTablet computerLibrary (computing)Normed vector spacePhase transitionRootkitFunctional (mathematics)Medical imagingMultiplication signFirmwareSpacetimeModule (mathematics)Process (computing)Virtual machineJava appletDevice driverBridging (networking)Graphics tabletPascal's triangleComputer hardwareView (database)Graphical user interfaceComputer animationSource codeLecture/Conference

20:56

IntelMemory managementData managementBootingFirmwareFreewareComputer hardwareOnline helpMenu (computing)Electronic program guideComputer animation

21:43

PasswordComputer configurationRootkitCache (computing)Kernel (computing)Computer fileOpen sourceLogical constantBootingComputer configurationPasswordProcess (computing)QuicksortGroup actionDevice driverCodeBootingVulnerability (computing)Turbo-CodeFunctional (mathematics)Physical systemCausalityLecture/ConferenceComputer animation

22:26

Computer configurationPhysical systemFunction (mathematics)PCI ExpressProcess capability indexStructural loadConfiguration spaceBootingCausalityCore dumpComputer configurationPhysical systemDevice driverFunctional (mathematics)ArmCodeBuildingBlock (periodic table)Virtual machineInternet service providerHand fanWave packetModule (mathematics)Computing platformProcess (computing)Computer animation

23:19

Module (mathematics)FreewareDigital rights managementComputing platformSoftwareBlock (periodic table)CodeDynamic random-access memoryTrailPhysical systemGoodness of fitBootingEndliche ModelltheorieChainSuite (music)Matching (graph theory)Lecture/Conference

24:01

Module (mathematics)ChainCodeHash functionDescriptive statisticsDisk read-and-write headMatching (graph theory)Key (cryptography)MiniDiscComputer animation

24:42

Execution unitComputer wormKey (cryptography)MereologyPasswordMeasurementComputer hardwareTransport Layer SecurityLimit (category theory)Type theoryMiniDiscEncryptionVirtual machineBit rateInsertion lossDisk read-and-write headDescriptive statisticsField (computer science)Heegaard splittingLecture/Conference

25:27

CryptographyMeasurementMiniDiscEmailKey (cryptography)Secret sharingEncryptionService (economics)CryptographyMiniDiscBackupDescriptive statisticsEmailLine (geometry)Gastropod shellScripting languageSocial classEndliche ModelltheorieComputer animation

26:21

Virtual machinePhysical systemPasswordCodeComputerFirmwareBit rateAuthenticationElectronic visual displayConnectivity (graph theory)Multiplication signMessage passingGoogolLecture/Conference

27:08

BootingTotal S.A.Electric currentMultiplication signTouchscreenBootingFirmwareVirtual machineMatching (graph theory)Hash functionScripting languageGastropod shellLecture/Conference

27:57

Fluid staticsGame controllerComputerKey (cryptography)Information securityGroup actionRootRandomizationComputer hardwareMalwareVulnerability (computing)Scripting languageGodRevision controlDisk read-and-write headLevel (video gaming)Gastropod shellBootingKernel (computing)

29:12

Interior (topology)Android (robot)EncryptionComputer wormOpen sourceBulletin board systemAuthenticationBootingPartition (number theory)Electronic signatureHash functionFormal verificationPhysical systemKernel (computing)Block (periodic table)Data integritySurjective functionRootkitMacro (computer science)Android (robot)Key (cryptography)Read-only memoryFile systemRootConfidence intervalDean numberHash functionLogarithmBlock (periodic table)Physical systemNetwork topologyMultiplication signRoutingElectronic signatureKernel (computing)Reading (process)Computer fileInformation securityGroup actionDisk read-and-write headCubeOpen sourceVirtual machineComputer animationLecture/Conference

30:18

Hash functionOpen sourceComputer hardwareInformation securityCubeBootingPhysical systemCore dumpInformation securityCubePhysical systemSoftwareDisk read-and-write headConfiguration spaceVirtual machineOpen sourceRead-only memoryRootData recoveryComputer fileAsynchronous Transfer ModeFile systemReal number

31:07

Data bufferConvex hullMathematicsMatching (graph theory)CASE <Informatik>Disk read-and-write headPatch (Unix)Group actionCubeDistribution (mathematics)Open sourceNetwork topologyMiniDiscSource codeLecture/Conference

31:44

Library (computing)Computer wormHash functionDiscrete element methodBootingMathematicsOpen sourceAreaQuicksortGraphical user interfaceState of matterGame controllerRootComputing platformIntelPlastikkarteComputer animationLecture/Conference

32:20

Point cloudProjective planeServer (computing)LaptopOpen setInformation securityBuildingPoint cloudDifferent (Kate Ryan album)Cloud computingGame controllerIntelligent NetworkCore dumpEndliche ModelltheorieMassOpen sourceBootingData managementComputing platformCollaborationismFirmwareIntegrated development environmentComputer animation

33:12

Core dumpBootingLaptopFlash memoryProgrammer (hardware)WebsiteRevision controlProjective planeOpen sourceDisk read-and-write headSource codeInstallation artFirmwareFeedbackLecture/ConferenceComputer animation

34:12

IntelVirtual machineCASE <Informatik>LaptopExtension (kinesiology)FirmwareBefehlsprozessorOpen sourceLecture/Conference

35:19

Computer wormPhysical systemComputer hardwareInformation securityElectronic program guidePersonal identification numberArmSelectivity (electronic)Service (economics)BefehlsprozessorLaptopChainProcess (computing)40 (number)Computer animationLecture/Conference

35:55

Computer hardwareBootingAsynchronous Transfer ModeGame controllerComputer wormCodeRootArmCore dumpWeb pageDisk read-and-write headMetropolitan area networkLecture/Conference

37:09

Computer worm10 (number)InternetworkingOpen sourceTerm (mathematics)Mobile WebBlock (periodic table)NumberBinary codeBootingCore dumpSystem callFirmwareSemiconductor memoryGame controllerBridging (networking)DemosceneGroup actionComputing platformOrder (biology)View (database)BefehlsprozessorComputer animationLecture/Conference

38:13

Game controllerState of matterMeasurementSemiconductor memoryQuicksortPhysical systemFreewareOpen sourceTotal S.A.ArmNumberAreaLaptopSoftwareComputer animation

39:12

Core dumpConnectivity (graph theory)BootingCombinational logicSpacetimeHeat transferTerm (mathematics)Axiom of choiceSystem callProjective planeKernel (computing)Latent heatDisk read-and-write headComputer wormMeasurementInstance (computer science)MultiplicationKey (cryptography)Decision theoryRow (database)Functional (mathematics)Lecture/Conference

40:43

Physical systemCore dumpMeasurementKey (cryptography)InternetworkingConfiguration spaceHash functionBootingFirmwareTerm (mathematics)Process (computing)Device driverBinary codeMereologyLevel (video gaming)Human migrationDisk read-and-write headEncryptionComputer wormCASE <Informatik>Cache (computing)Web pageLecture/Conference

42:17

Disk read-and-write headInformation securityCore dumpBootingFirmwareOpen sourceMeasurementCuboidPatch (Unix)ResultantMathematicsGraphics tabletGroup actionGraphical user interfaceLecture/ConferenceComputer animation

43:09

10 (number)Suite (music)BootingBuildingCommunications protocolFirmwareComputing platformCuboidGraphical user interfaceArmTerm (mathematics)Game controllerCore dumpMereologyCompilerBus (computing)Open sourceBefehlsprozessorLecture/Conference

44:22

Computer wormInheritance (object-oriented programming)Graphics tabletPrototypeEndliche ModelltheorieOpen sourceParticle systemService (economics)FamilyModule (mathematics)CASE <Informatik>Communications protocolFirmwareComputer animation

45:13

Computer wormArithmetic progressionPrototypeComputing platformBitOpen sourcePosition operatorSystem callKeyboard shortcutAreaGraphics tabletOpen setExtension (kinesiology)Beat (acoustics)BootingPhysical systemProcess (computing)Computer animation

46:05

Programmer (hardware)FirmwareOnline helpFlash memoryComputer hardwareProcedural programmingDimensional analysisComputer programmingRight angleBootingSoftwareSpacetimeCartesian coordinate systemComputer animation

46:44

10 (number)MedianHypermediaCartesian closed categoryCartesian coordinate systemBlock (periodic table)BootingFirmwareComputer animationLecture/ConferenceJSON

Transcript: English(auto-generated)