A coworker of mine is attempting to crate a verifiable and trustworthy computer, unfortunately this means starting from scratch. I thought /r/security might want to talk to him.

I am a researcher at Carnegie Mellon University's Software Engineering Institute (A federally funded research and development center), and I thought some of you might want to pick the brain of my coworker, Gabriel Somlo.

With all the hardware / supply chain attacks we've been seeing lately, Gabe is attempting to build a computer he can trust, from the ground up. Tomorrow at 2pm eastern time I'll be chatting with him on our video stream (link in the comments). He and I will both be on the chat during the video, answering your questions.

If you want to post some questions in this thread, I'll make sure to run them over to his office and get you an answer as well, unless it is something we already cover in the video.

---

Some technical details of what he's doing: Gabe is attempting to create a verifiable and trustworthy computer, starting with an entirely open source processor, memory controller, bus system, and peripheral interfaces compiled from Verilog, then programmed directly to a field programmable gate array (FPGA), he is attempting to get a live running linux system, where each step of the process can be audited and reproduced.

Submitted May 28, 2019 at 10:39PM by Rotem_Guttman http://bit.ly/2XaAbj5 via TikTokTikk