Lmst

It's official! #TockWorld8 will be hosted at Microsoft in Redmond, WA, just a stone's throw from @rustconf on September 5th. Join us for a schedule on #TockOS in new places, #Rust verification, low-level LLVM hackery, and more!

https://world.tockos.org/tockworld8/register

#Microsoft gibt mehr Details zu seinem #Pluton #Prozessor bekannt.

#TockOS #Rust #TPM #SoC
https://techcommunity.microsoft.com/blog/windows-itpro-blog/understanding-the-microsoft-pluton-security-processor/4370413

early issues with #TockOS build on #nix
https://github.com/tock/tock/pull/2323#issuecomment-2334951659

In Summary, Rust + Tock OS Architecture + Lightweight verification is a solution to provide safe firmware.

#OSFC #RustLang #TockOS

Samir and the Summary slide, reading:

* Rust
- Memory management Rust language safety
- Undefined behaviour is explicit and minimized
* Architecture
- Faulty drivers capsules are isolated from kernel
- Concurrency/Locking avoided
* Lightweight Verification
- Logic bugs via verification
- Malicious attacks cannot break the easily auditable compile-time safety

"An integer overflow caused $370M to vaporize in 40 seconds."

When a rocket exploded in flight because of two simultaneous integer overflow in independently written systems.

Luckily the industry has learned from this, right? Not really, with some Boeing planes having to be rebooted every 51 days to prevent catastrophically wrong information being shown to pilots.

This is Samir's talk on Tock OS, or how to secure firmware at compile time.

#OSFC #OSFC2024 #TockOS #RustLang

Samir (left) with the opening slide reading

Provable Security in Embedded Systems: Verification Work in Tock OS

By Samir Rashid

Samir next to the slide showing a headline that reads:

Boeing 787s need to be turned off and on every 51 days to prevent "misleading data" being shown to pilots.

Samir next to the same title slide as the first picture, plus the link:

https://godsped.com/safe-firmware/

@TornaxO7 my own devshell , iirc , , I have the texted you the URL of the same , which I already shared in my DM to you in discourse ( in order to compare notes ) , you didn't seem to be active here or there since a while .... so
but thanks for quick reply .
thoughts on #tockos ?

Oh, there are now #FIDO security keys based on #Google's #OpenSK firmware for #Titan based on #TockOS (both in #Rust), available for purchase:
https://shop.ftsafe.us/products/opensk-v2

Do note that these do *not* feature a secure element and are not resistant to more advanced physical attacks or side channels, although still probably an upgrade to disk storage as long as you keep the key safe:
https://feitiantech.github.io/OpenSK_USB/caution/

Nevertheless, an interesting toy!