Qubes hardware certification

•

2 likes•145 views

The presentation discusses the possible synergy between open-source firmware consultants and Qubes OS in light of hardware certification. It also analyses possible further support in Qubes OS for alternative computer architectures like OpenPOWER, ARM, and RISC-V. What problems have to be solved and how.

Technology

Qubes Hardware Certiﬁcation
Qubes OS and 3mdeb mini-summit 2019
Piotr Król
1 / 9

Opinions are my own and represent view of my employer
We do not follow very close Qubes OS development and discussions
We came from embedded and ﬁrmware world - our experience with
general-user-facing system is low
Disclaimer
2 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

we're working hard to make a "reasonably secure laptop" a reality
can we ask what does it mean?
what is the progress of that eﬀort?
is there any place for Open Source Firmware consulting company?
there are many companies trying the same
Serious prospective business customers should [contact us] for more
information
We would like to understand what that means
Feasible?
Qubes statement (2 years old)
3 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

Are there any architecture which can be considered not-harmful?
ARM
poisoned supply chain
hard to build general purpose computer for masses
UEFI
mobile solutions
Purism eﬀort around i.MX8
OpenPOWER
very expensive
we are not sure about exact state since we never worked
with this architecture
RISC-V
we think it is very promising
even if CPU is clear, we have to face tons of other blobs in diﬀerent system
components
ﬁrmware is everywhere
x86 considered harmful
4 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

coreboot
do you see any alternatives to open-source boot ﬁrmware?
BTW it really like your precise naming
Intel FSP
it looks that there are serious plans to open source FSP
BootROM in x86
(CS)ME/IE
after many PT revelations lots of interesting things happen
any comments on that?
Blobs
5 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

Not only hardware vendors are interested in that
OEM/ODM
Embedded Systems Consulting
Customers often come to us from Qubes OS website
Thank you
Qubes OS (hw cert) -> coreboot -> consulting -> 3mdeb
Qubes certiﬁed laptop
Hardware certiﬁcation
6 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

Are there any real issues with UEFI in light of certiﬁcation?
IBVs are not very welcome in current ecosystem
Does Qubes OS see some implementation problems with UEFI
implementation
What are the things users complain?
Any hard to debug/workaround/ﬁx bugs aﬀecting OS?
UEFI issues
7 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

Is there a place for Qubes OS and companies like 3mdeb to cooperate?
what areas?
how we can help each other assuming reasonable resources?
Discussion
Qubes OS and 3mdeb
8 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

Q&A
9 / 9
Qubes OS and 3mdeb minisummit 2019
CC BY | Piotr Król

The document discusses adding support for TPM 2.0 chips in Qubes OS. Currently, Qubes only supports TPM 1.2 chips and cannot detect TPM 2.0 chips. The Linux kernels used in Qubes (4.14 and 4.19) are missing some TPM 2.0 configuration options. Testing on real hardware with a TPM 2.0 chip showed the chip is detected but Qubes reports "Device not found". Integrating TPM 2.0 support would allow using newer TPM standard chips but may require changes to tools like Anti-Evil Maid that currently only support TPM 1.2.

S-RTM for Qubes OS VMs

Piotr Król

pkgsrc 2013 - the record of the past year

Akio OBATA

Qubes os presentation_to_clug_20150727

csirac2

Qubes OS is an open source operating system that provides strong security for desktop computing using the principle of security by compartmentalization. It runs Fedora in a special administrative domain (dom0) and allows other template virtual machines like Debian and Arch Linux. Rather than providing process-level isolation like other operating systems, Qubes OS takes advantage of virtual machine isolation to compartmentalize different tasks and restrict what software can access. This allows it to address security issues with allowing applications to access keystrokes, screenshots, clipboard contents and devices on traditional desktop operating systems.

Using QEMU for cross development

Tetsuyuki Kobayashi

This document discusses using QEMU for cross development. It begins with an introduction to QEMU and what it is used for. Specifically, QEMU is an open source machine emulator and virtualizer that is commonly used as a system emulator when the host and target CPUs are different. It allows emulating systems like Android, Linux, and others when the hardware is not available. The document then discusses how QEMU is well suited for tasks like learning, application development, and testing since it does not require physical hardware and can be easily duplicated. However, it is not as useful for tasks like performance evaluation or developing drivers for new hardware. The rest of the document provides examples of using QEMU for cross compiling Linux

Libvirt API Certification

LinuxCon ContainerCon CloudOpen China

This document discusses the architecture and evolution of Libvirt, an open source software library that provides a standardized interface to various virtualization technologies like Xen, QEMU, KVM, LXC, and others. It outlines Libvirt's public API, driver API, and driver implementations that allow applications to manage virtual machines across different platforms. The document also mentions Libvirt's certification process for hardware and software compatibility and its automated testing framework.

MVUG Webcast Slide:- From Zero to Hero on Hyper V R2- Part 2

Lai Yoong Seng

This document discusses how to quickly debug VM failures in OpenStack. It begins by explaining where VMs run in OpenStack and how VM startup is implemented. It then describes how to use various logs from OpenStack components like Nova, Neutron, and libvirt/Qemu to troubleshoot issues. The document also provides examples of common VM failure types and outlines steps for debugging, including checking configuration settings, log files, and using troubleshooting tools like Virsh and ABRT. Finally, it calls for collecting VM failure scenarios and solutions to integrate into monitoring tools like StackTach.

XPDS14 - Xen as High-Performance NFV Platform - Jun Nakajima, Intel

The Linux Foundation

We are building a high-performance NFV (Network Functions Virtualization) platform using Xen. Unlike the conventional use cases of Xen-based systems, such as data center or public cloud, NFV platforms require low-latency and high-bandwidth I/O for virtual middleboxes to handle small packets efficiently. It is challenging to meet such requirements in virtualization environments because of additional virtualization overhead. We'll discuss a couple of solutions for high-performance packet forwarding, including SR-IOV VF (Virtual Function), shared-memory channels for VM-to-VM communication, resolving the major bottlenecks and latency/realtime issues, taking advantage of the Xen's architecture. We also discuss how the modern hardware-based virtualization features, such as Posted Interrupts, are helpful. Finally we share the best practices when achieving such high-performance systems. "We are building a high-performance NFV (Network Functions Virtualization) platform using Xen. Unlike the conventional use cases of Xen-based systems, such as data center or public cloud, NFV platforms require low-latency and high-bandwidth I/O for virtual middleboxes to handle small packets efficiently. It is challenging to meet such requirements in virtualization environments because of additional virtualization overhead. We'll discuss a couple of solutions for high-performance packet forwarding, including SR-IOV VF (Virtual Function), shared-memory channels for VM-to-VM communication, resolving the major bottlenecks and latency/realtime issues, taking advantage of the Xen's architecture. We also discuss how the modern hardware-based virtualization features, such as Posted Interrupts, are helpful. Finally we share the best practices when achieving such high-performance systems.

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

The Linux Foundation

As the first ARM servers and microservers hit the market, Xen on ARM is becoming more mature, stable and reaching feature parity with x86. This talk will present the current status of the project, will describe the latest improvements, the gaps that still need to be filled and the roadmap going forward. ARMv8 silicon is now available for purchase: we can measure how well Xen on ARM 64-bit is performing on real hardware and compare the performance figures with other hypervisors. The presentation will show these results, it will measure the overhead introduced by Xen on ARM and will compare it with the overhead introduced by Xen and KVM on x86. The talk will explain the reasons behind performance shortfalls and present ideas on how to address them in the future. The performance results will be used to determine when it makes sense to use Xen on ARM and what are the best use cases for it.

XPDS14: Removing the Xen Linux Upstream Delta of Various Linux Distros - Luis...

The Linux Foundation

Xen is being used in production by many folks, but are they really using the upstream code? If not what are they using? At least SUSE's supported delta for the Linux kernel consists of 116 patches totaling 353,770 lines of code. Debian has 43 patches for a delta of about 1693 lines of code. What is this delta and how do we shrink it? I will give an overview of the supported Linux kernel delta for Xen at SUSE and Debian with upstream but also layout a proposed roadmap of addressing the delta in collaboration with different teams in the Xen community.

Installing node.js

Mudassar Ali Sahil

There are three main ways to install Node.js: using pre-compiled binaries, a version manager like NVM, or compiling from source. Pre-compiled binaries are easy to install but require reinstallation for updates or version changes. NVM allows quickly installing and switching between versions from the command line but requires installing the manager first. Compiling from source gives the latest code but is more complex. The author recommends using a version manager like NVM for flexibility in switching versions without reinstalling.

Proxmox for DevOps

Jorge Moratilla Porras

QEMU in Cross building

Tetsuyuki Kobayashi

The document discusses building software for embedded systems across different architectures using QEMU. It describes native building versus cross building, and compares building directly on a system emulator versus Scratchbox. It proposes that a simpler approach is to use just the user mode of QEMU, along with chroot and binfmt_misc. An example is given of setting up a basic ARM chroot environment and building software faster using user mode QEMU instead of a full system emulator. Issues like mounting proc and networking are also addressed.

FreeBSD preseed installation (PXE) AsiaBSDCon 2015

Kamil Czekirda

This document discusses preseeding FreeBSD installations using a Fully Automatic Installer (FAI). It describes extending the bsdinstall script to allow device preparation, installation, and configuration to be automated. Key parameters that can be configured include partitions, ZFS settings, package mirrors, and post-install configuration like hostname, users, and network configuration. The FAI allows unattended FreeBSD installations from a network boot using PXE or iPXE without requiring an NFS server. A demo is provided of a local mirror with DHCP and TFTP servers to netboot multiple clients for automated installation via the FAI.

Qemu

Koganti Ravikumar

QEMU is a free and open-source hypervisor that performs hardware virtualization by emulating CPUs through dynamic binary translation and providing device models. This allows it to run unmodified guest operating systems. It can be used to create virtual machines similarly to VMWare, VirtualBox, KVM, and Xen. QEMU also supports emulating different CPU architectures and can save and restore the state of a virtual machine.

Proxmox Talk - Linux Fest Northwest 2018

Richard Clark

Proxmox ve-datasheet

Miguel Angel

Proxmox VE is a complete virtualization management solution that allows virtualization of Linux and Windows workloads. It combines KVM hypervisor and LXC containers on a single management platform with strong high-availability support through a multi-master cluster design with no single point of failure. It includes a web-based management interface to easily control virtualization functions and provides access to logs across all cluster nodes. Proxmox VE is open source software that ensures flexibility and security for enterprise virtualization deployments.

OpenStack Cinder Project Update - Shanghai 2019

Brian Rosmaita

XPDS16: The OpenXT Project in 2016 - Christopher Clark, BAE Systems

The Linux Foundation

The OpenXT Project is an Open Source community producing a Xen-based platform for client devices with a focus on providing strong security properties. The different primary use cases of this project versus server-based Xen systems have motivated notable technical differences and consequently OpenXT should be of interest to anyone seeking to understand the full set of capabilities on offer within the Xen ecosystem. In this presentation, Christopher Clark will describe the technical architecture of OpenXT, its current status and development activity within the project and its engagement with the upstream OpenEmbedded and Xen projects. This will include an overview of OpenXT's differentiating features such as Measured Launch, Virtual TPMs, Linux-based stubdoms, a specialized input layer and a distinct PV USB stack for Windows and Linux.

Step by Step - Reusing old features to build new ones

Allon Mureinik

Designing monolithic infrastructures is a common mistake in large projects. However, more often than not, these infrastructures are too generic, make false assumptions or are simply delivered too late for feature developers to use, becoming "white elephants". This presentation is a case study of the work done by my team to deliver Live Merging of Snapshots oVirt from the initial steps in oVirt 3.1.0 to the full delivery in 3.5.0, and how good design can be feature-driven, building infra-structures step by step, while gaining small wins during the process.

OpenWRT manual

fosk

Drive into kvm

Udayendu Kar

Bsdtw17: lightning talks/wip sessions

Scott Tsai

This summary covers two lightning talks from BSDTW17: 1) The first talk proposed allowing multiple encrypted GEOM providers to attach using the same passphrase, improving on having to enter the passphrase multiple times. A new rc.conf syntax was suggested. 2) The second talk discussed ongoing work to improve MP-safe networking in NetBSD, including improvements to layers 2-3, drivers, and other components like pfill and npf. Remaining work and questions were also outlined.

Bringing Linux back to the Server BIOS with LinuxBoot - Trammel Hudson

Two Sigma

The NERF and Heads projects bring Linux back to the cloud servers' boot ROMs by replacing nearly all of the vendor firmware with a reproducible built Linux runtime that acts as a fast, flexible, and measured boot loader. It has been years since any modern servers have supported Free Firmware options like LinuxBIOS or coreboot, and as a result server and cloud security has been dependent on unreviewable, closed source, proprietary vendor firmware of questionable quality. With Heads on NERF, we are making it possible to take back control of our systems with Open Source Software from very early in the boot process, helping build a more trustworthy and secure cloud.

[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...

Akihiro Suda

1. Kubernetes can be used to distribute Docker builds across multiple nodes for improved performance and scalability using BuildKit and the new BuildX toolkit. 2. BuildX introduces a Kubernetes driver that allows builds to run on Kubernetes pods with no complex YAML or TLS configuration required, providing the same user experience as local Docker builds. 3. Builds can be executed without root privileges on Kubernetes for improved security, and the Kubernetes driver supports caching of build artifacts both locally on pods and remotely to a registry for faster rebuilds.

2009-12-04 New York City System z Executive Council

Shawn Wells

Lightning talks - Qubes OS and 3mdeb "minisummit" 2019

Piotr Król

Why Cloud Computing has to go the FOSS way

Ahmed Mekkawy

What's hot

Quickly Debug VM Failures in OpenStack

LinuxCon ContainerCon CloudOpen China

XPDS14 - Xen as High-Performance NFV Platform - Jun Nakajima, Intel

The Linux Foundation

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

The Linux Foundation

XPDS14: Removing the Xen Linux Upstream Delta of Various Linux Distros - Luis...

The Linux Foundation

Installing node.js

Mudassar Ali Sahil

Proxmox for DevOps

Jorge Moratilla Porras

QEMU in Cross building

Tetsuyuki Kobayashi

FreeBSD preseed installation (PXE) AsiaBSDCon 2015

Kamil Czekirda

Qemu

Koganti Ravikumar

Proxmox Talk - Linux Fest Northwest 2018

Richard Clark

Proxmox ve-datasheet

Miguel Angel

OpenStack Cinder Project Update - Shanghai 2019

Brian Rosmaita

XPDS16: The OpenXT Project in 2016 - Christopher Clark, BAE Systems

The Linux Foundation

Step by Step - Reusing old features to build new ones

Allon Mureinik

OpenWRT manual

fosk

Drive into kvm

Udayendu Kar

Bsdtw17: lightning talks/wip sessions

Scott Tsai

Bringing Linux back to the Server BIOS with LinuxBoot - Trammel Hudson

Two Sigma

[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...

Akihiro Suda

2009-12-04 New York City System z Executive Council

Shawn Wells

What's hot (20)

Quickly Debug VM Failures in OpenStack

XPDS14 - Xen as High-Performance NFV Platform - Jun Nakajima, Intel

XPDS14 - Xen on ARM: Status and Performance - Stefano Stabellini, Citrix

XPDS14: Removing the Xen Linux Upstream Delta of Various Linux Distros - Luis...

Installing node.js

Proxmox for DevOps

QEMU in Cross building

FreeBSD preseed installation (PXE) AsiaBSDCon 2015

Qemu

Proxmox Talk - Linux Fest Northwest 2018

Proxmox ve-datasheet

OpenStack Cinder Project Update - Shanghai 2019

XPDS16: The OpenXT Project in 2016 - Christopher Clark, BAE Systems

Step by Step - Reusing old features to build new ones

OpenWRT manual

Drive into kvm

Bsdtw17: lightning talks/wip sessions

Bringing Linux back to the Server BIOS with LinuxBoot - Trammel Hudson

[KubeConUS2019 Docker, Inc. Booth] Distributed Builds on Kubernetes with Bui...

2009-12-04 New York City System z Executive Council

Similar to Qubes hardware certification

Lightning talks - Qubes OS and 3mdeb "minisummit" 2019

Piotr Król

Why Cloud Computing has to go the FOSS way

Ahmed Mekkawy

Contiki OS Research Projects Guidance

Network Simulation Tools

Common Missteps in Cross-Platform Development.pdf

Pridesys IT Ltd.

Cw13 why cloud computing has to go the foss way by ahmed mekkawy

inevitablecloud

This document discusses why cloud computing needs to adopt free and open source software (FOSS) principles. It provides a brief history of computing beginning with mainframes and virtualization in the 1960s. It discusses how software was initially free but later became proprietary. The document advocates for open standards and open source platforms like OpenStack to avoid vendor lock-in and allow for innovation. The author argues users want flexibility and freedom of choice in the cloud, which open source and open standards can provide.

Cw13 why cloud computing has to go the foss way by ahmed mekkawy

TheInevitableCloud

This document discusses why cloud computing needs to adopt free and open source software (FOSS) principles. It provides a brief history of computing beginning with mainframes and virtualization in the 1960s. It discusses how software was initially free but later became proprietary. The document advocates for open standards and highlights OpenStack as an example of an open source cloud computing platform developed through collaboration. It argues that users care most about features and interoperability rather than underlying technologies, and that open source helps prevent vendor lock-in while fostering innovation. The overall message is that cloud computing should embrace open source and open standards to provide users with freedom.

Vroom!

Jeremiah Foster

Introduction to Embedded Systems

Anil Kumar Pugalia

The document discusses an introduction to embedded systems workshop. It covers topics like what embedded systems are, why they are needed, real-time requirements, embedded software components including bootloaders, operating systems and applications. It discusses the role of open source software like Linux in embedded development. Key points are that embedded systems are hardware devices designed to perform specific tasks, they have requirements like reliability, low power and cost-effectiveness, and open source software like Linux is widely used due to benefits like availability, community support and cost.

Cloud Computing

pwcom.co.uk Ltd

Cloud computing refers to applications, platforms, and infrastructure resources that are delivered as a service over the Internet. Major tech companies like Microsoft are now developing cloud-based operating systems and services. While cloud computing offers scalable and cheap infrastructure when combined with open source solutions, there are also concerns about privacy, data ownership, and reliance on third party systems and servers. In the short term, cloud computing may affect the built environment through the delivery of bandwidth and networking as basic utilities.

Status of AEM for Intel and AMD

Piotr Król

In this presentation, we discuss the current state of Anti-Evil Maid mitigation. Protection by ensuring the state of the platform. If we can trust the hardware and software we use, can we feel safe? How to determine if the state of the platform is trusted and hardware/firmware/software has not tampered? Trusted Execution / Trusted Computing: - TPM module by TCG - Intel TXT - AMD Secure Launch with SKINIT

Why you should use the Yocto Project

rossburton

Ross Burton has been working on the Yocto Project for nearly a year and previously worked on its precursor, Poky. The Yocto Project helps companies build customized Linux distributions for embedded products like set-top boxes, digital signs, networking equipment, and more. It provides advantages over general purpose desktop distributions by being designed for long-term use, having reproducible builds, and allowing full customization while maintaining standards and support.

OSGI,

James Governor

This document discusses OSGi trends, directions, and opportunities. It summarizes that OSGi grew out of a need for modular Java applications but modularity was an afterthought. It is now used widely by companies like Eclipse, IBM, Oracle, and VMware. While OSGi offers benefits, some argue it is still difficult for developers to use. However, as packaging and deployment of applications becomes more distributed and complex, OSGi's modular architecture is increasingly relevant and may see more widespread adoption.

BSD Magazine December issue

Valerie Heatley

The article discusses several new features and improvements in the Linux 4.4 kernel release, including: - Support for AMD's Stoney APU and various improvements to the AMDGPU driver. - A new Raspberry Pi KMS driver, though it does not yet support 3D hardware acceleration. - Support for 3D GPU passthrough to virtual machines using VirtIO and VirGL. - Various graphics driver improvements for AMD, Intel, Nouveau, and Freedreno.

Is Android the New King of Embedded OSes at Embedded World 2014

Opersys inc.

This document discusses whether Android is becoming the new dominant operating system for embedded devices. It begins by outlining the rise of embedded Linux and current consumer trends towards touch-based mobile devices. It then reviews the history and development of Android, including its origins at Android Inc. and acquisition by Google. The document examines the differences between embedded Linux and Android, particularly Android's integrated development environment, standardized APIs and large developer community. It concludes by considering Android's potential challenges for embedded use, such as documentation, stack customization, long boot times and dependency on Google.

BITS and CHIPSEC as coreboot payloads

Piotr Król

In this presentation, we would like to present how BITS and CHIPSEC can be utilized on top of coreboot enabled platform to verify the quality of underlying firmware. Firmware security is mostly about validation and formal development processes. To achieve some level of confidence about firmware implementation quality various tools were developed, of which most notable are CHIPSEC and BITS. BITS (BIOS Implementation Test Suite) consist of a GRUB2 bootloader extended with runtime Python support. CHIPSEC is a Platform Security Assessment Framework which mostly focuses on platform configuration but can also be used for other purposes (e.g. verification of Spectre mitigation presence). We would like to present what issues firmware developers may face and what we were able to achieve at this ground using BITS and CHIPSEC for validation of PC Engines apu2 and MinnowBoard Turbot platform. We want to present what modifications are required to integrated Python code along with CHIPSEC and BITS scripts. We also would like to demonstrate practical usage of mentioned frameworks by showing short demo.

Kernel Recipes 2019 - Driving the industry toward upstream first

Anne Nicolas

This document discusses the benefits of contributing device drivers and other code to the Linux kernel upstream first instead of maintaining private branches. It outlines Chrome OS's strategy of picking long-term stable kernels and contributing hardware support to upstream. While challenging, working upstream provides many benefits like free code reviews, bugfixes, and easier updates. The document shows that Chrome OS contributions have helped increase upstream support for vendors' devices and that there is still work remaining to upstream GPU and other drivers. It demos mainlining the Samsung Chromebook Plus by using the open source Panfrost GPU driver instead of a vendor driver.

Microsoft Tech Club Cairo University "MSTC'16 Builders and Developers " First...

Wagdy Mohamed

Why the yocto project for my io t project elc_edinburgh_2018

Mender.io

This document summarizes a presentation about using the Yocto Project for IoT projects. It discusses the challenges of embedded Linux development and introduces the Yocto Project as a build system that can address these challenges. It provides an overview of the Yocto Project workflow and features like its layer-based structure and SDK support. Finally, it outlines benefits of using the Yocto Project for IoT projects, including support for common IoT protocols and the ability to customize software for specific hardware.

.NET and Kubernetes: Bringing Legacy .NET Into the Modern World with Pivotal ...

VMware Tanzu

Embedded Linux BSP Training (Intro)

RuggedBoardGroup

Similar to Qubes hardware certification (20)

Lightning talks - Qubes OS and 3mdeb "minisummit" 2019

Why Cloud Computing has to go the FOSS way

Contiki OS Research Projects Guidance

Common Missteps in Cross-Platform Development.pdf

Cw13 why cloud computing has to go the foss way by ahmed mekkawy

Vroom!

Introduction to Embedded Systems

Cloud Computing

Status of AEM for Intel and AMD

Why you should use the Yocto Project

OSGI,

BSD Magazine December issue

Is Android the New King of Embedded OSes at Embedded World 2014

BITS and CHIPSEC as coreboot payloads

Kernel Recipes 2019 - Driving the industry toward upstream first

Microsoft Tech Club Cairo University "MSTC'16 Builders and Developers " First...

Why the yocto project for my io t project elc_edinburgh_2018

.NET and Kubernetes: Bringing Legacy .NET Into the Modern World with Pivotal ...

Embedded Linux BSP Training (Intro)

Recently uploaded

Trusted Execution Environment for Decentralized Process Mining

LucaBarbaro3

Columbus Data & Analytics Wednesdays - June 2024

Jason Packer

Best 20 SEO Techniques To Improve Website Visibility In SERP

Pixlogix Infotech

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

saastr

System Design Case Study: Building a Scalable E-Commerce Platform - Hiike

Hiike

Your One-Stop Shop for Python Success: Top 10 US Python Development Providers

akankshawande

Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf

Malak Abu Hammad

Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers: * What is Vector Search? * Importance and benefits of vector search * Practical use cases across various industries * Step-by-step implementation guide * Live demos with code snippets * Enhancing LLM capabilities with vector search * Best practices and optimization strategies Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications. #MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology

Programming Foundation Models with DSPy - Meetup Slides

Zilliz

Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on integration of Salesforce with Bonterra Impact Management. Interested in deploying an integration with Salesforce for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Generating privacy-protected synthetic data using Secludy and Milvus

Zilliz

During this demo, the founders of Secludy will demonstrate how their system utilizes Milvus to store and manipulate embeddings for generating privacy-protected synthetic data. Their approach not only maintains the confidentiality of the original data but also enhances the utility and scalability of LLMs under privacy constraints. Attendees, including machine learning engineers, data scientists, and data managers, will witness first-hand how Secludy's integration with Milvus empowers organizations to harness the power of LLMs securely and efficiently.

Letter and Document Automation for Bonterra Impact Management (fka Social Sol...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on automated letter generation for Bonterra Impact Management using Google Workspace or Microsoft 365. Interested in deploying letter generation automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Skybuffer AI: Advanced Conversational and Generative AI Solution on SAP Busin...

Tatiana Kojar

Skybuffer AI, built on the robust SAP Business Technology Platform (SAP BTP), is the latest and most advanced version of our AI development, reaffirming our commitment to delivering top-tier AI solutions. Skybuffer AI harnesses all the innovative capabilities of the SAP BTP in the AI domain, from Conversational AI to cutting-edge Generative AI and Retrieval-Augmented Generation (RAG). It also helps SAP customers safeguard their investments into SAP Conversational AI and ensure a seamless, one-click transition to SAP Business AI. With Skybuffer AI, various AI models can be integrated into a single communication channel such as Microsoft Teams. This integration empowers business users with insights drawn from SAP backend systems, enterprise documents, and the expansive knowledge of Generative AI. And the best part of it is that it is all managed through our intuitive no-code Action Server interface, requiring no extensive coding knowledge and making the advanced AI accessible to more users.

Energy Efficient Video Encoding for Cloud and Edge Computing Instances

Alpen-Adria-Universität

Ocean lotus Threat actors project by John Sitima 2024 (1).pptx

SitimaJohn

Ocean Lotus cyber threat actors represent a sophisticated, persistent, and politically motivated group that poses a significant risk to organizations and individuals in the Southeast Asian region. Their continuous evolution and adaptability underscore the need for robust cybersecurity measures and international cooperation to identify and mitigate the threats posed by such advanced persistent threat groups.

Recommendation System using RAG Architecture

fredae14

Main news related to the CCS TSI 2023 (2023/1695)

Jakub Marek

An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers. The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 . The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .

Finale of the Year: Apply for Next One!

GDSC PJATK

Nunit vs XUnit vs MSTest Differences Between These Unit Testing Frameworks.pdf

flufftailshop

When it comes to unit testing in the .NET ecosystem, developers have a wide range of options available. Among the most popular choices are NUnit, XUnit, and MSTest. These unit testing frameworks provide essential tools and features to help ensure the quality and reliability of code. However, understanding the differences between these frameworks is crucial for selecting the most suitable one for your projects.

Nordic Marketo Engage User Group_June 13_ 2024.pptx

MichaelKnudsen27

Presentation of the OECD Artificial Intelligence Review of Germany

innovationoecd

Recently uploaded (20)

Trusted Execution Environment for Decentralized Process Mining

Columbus Data & Analytics Wednesdays - June 2024

Best 20 SEO Techniques To Improve Website Visibility In SERP

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

System Design Case Study: Building a Scalable E-Commerce Platform - Hiike

Your One-Stop Shop for Python Success: Top 10 US Python Development Providers

Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf

Programming Foundation Models with DSPy - Meetup Slides

Salesforce Integration for Bonterra Impact Management (fka Social Solutions A...

Generating privacy-protected synthetic data using Secludy and Milvus

Letter and Document Automation for Bonterra Impact Management (fka Social Sol...

Skybuffer AI: Advanced Conversational and Generative AI Solution on SAP Busin...

Energy Efficient Video Encoding for Cloud and Edge Computing Instances

Ocean lotus Threat actors project by John Sitima 2024 (1).pptx

Recommendation System using RAG Architecture

Main news related to the CCS TSI 2023 (2023/1695)

Finale of the Year: Apply for Next One!

Nunit vs XUnit vs MSTest Differences Between These Unit Testing Frameworks.pdf

Nordic Marketo Engage User Group_June 13_ 2024.pptx

Presentation of the OECD Artificial Intelligence Review of Germany

Qubes hardware certification

1. Qubes Hardware Certiﬁcation Qubes OS and 3mdeb mini-summit 2019 Piotr Król 1 / 9

2. Opinions are my own and represent view of my employer We do not follow very close Qubes OS development and discussions We came from embedded and ﬁrmware world - our experience with general-user-facing system is low Disclaimer 2 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

3. we're working hard to make a "reasonably secure laptop" a reality can we ask what does it mean? what is the progress of that eﬀort? is there any place for Open Source Firmware consulting company? there are many companies trying the same Serious prospective business customers should [contact us] for more information We would like to understand what that means Feasible? Qubes statement (2 years old) 3 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

4. Are there any architecture which can be considered not-harmful? ARM poisoned supply chain hard to build general purpose computer for masses UEFI mobile solutions Purism effort around i.MX8 OpenPOWER very expensive we are not sure about exact state since we never worked with this architecture RISC-V we think it is very promising even if CPU is clear, we have to face tons of other blobs in different system components firmware is everywhere x86 considered harmful 4 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

5. coreboot do you see any alternatives to open-source boot ﬁrmware? BTW it really like your precise naming Intel FSP it looks that there are serious plans to open source FSP BootROM in x86 (CS)ME/IE after many PT revelations lots of interesting things happen any comments on that? Blobs 5 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

6. Not only hardware vendors are interested in that OEM/ODM Embedded Systems Consulting Customers often come to us from Qubes OS website Thank you Qubes OS (hw cert) -> coreboot -> consulting -> 3mdeb Qubes certiﬁed laptop Hardware certiﬁcation 6 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

7. Are there any real issues with UEFI in light of certification? IBVs are not very welcome in current ecosystem Does Qubes OS see some implementation problems with UEFI implementation What are the things users complain? Any hard to debug/workaround/fix bugs affecting OS? UEFI issues 7 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

8. Is there a place for Qubes OS and companies like 3mdeb to cooperate? what areas? how we can help each other assuming reasonable resources? Discussion Qubes OS and 3mdeb 8 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

9. Q&A 9 / 9 Qubes OS and 3mdeb minisummit 2019 CC BY | Piotr Król

Qubes hardware certification

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Qubes hardware certification

Similar to Qubes hardware certification (20)

Recently uploaded

Recently uploaded (20)

Qubes hardware certification