open firmware

Evan Czaplicki, creator of Elm, discusses the hard parts of running an open source project: online community conflict, why its patterns arise, and a cultural history of open source. He offers ideas for more civil, productive communication.

Ronald Minnich of Google explains how UEFI firmware is a large closed attack surface and describes Google's work replacing it with Linux-based boot firmware. It also touches on Intel ME and other security coprocessors.

David Heinemeier Hansson's opening keynote at RailsConf 2019 argues against the expectation of payment for open source work, drawing on his experience releasing Rails. It also includes lighter asides about the industry.

Bryan Cantrill's talk on corporate open source anti-patterns, first given at FISL 2012 and again at the Liferay Symposium. He lays out the mistakes companies make when open sourcing code, such as announcing future open sourcing, and discusses licenses.

A dotJS 2012 conference talk by Fat (of Twitter Bootstrap fame) on what open source really means and why maintainers feel guilty about it. It covers the obligations, expectations and burnout that come with releasing popular open source software, delivered with humor.

Bryan Cantrill's OSCON 2015 talk on moving a proprietary product to open source, drawing on Sun's history with Solaris and illumos, licensing choices and the relicensing after Oracle's acquisition.

Tim Ansell presents the SkyWater PDK, a fully open source manufacturable process development kit for a 130nm process, as the first FOSSi Dial-Up talk. He covers its role in a fully open chip design flow.

A short hyperlapse of a 2019 Toyota Corolla using comma.ai's OpenPilot 0.6.3 to drive 100 miles with no intervention except for the windshield wipers.

Urs Hoelzle, Google's SVP of infrastructure, gives the 2012 Open Networking Summit keynote on how Google adopted OpenFlow and software-defined networking in its own networks. The slides are linked in the description.

Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk. It starts from the problems the protocols solve and walks through the flows. The description notes the implicit flow material is now out of date.

Peter Munch-Ellingsen explains at NimConf 2021 why he wrote his own keyboard firmware in Nim instead of using QMK or Arduino. He shows that the resulting firmware is very small.

Lex Fridman's long interview with OpenAI CEO Sam Altman about GPT-4, ChatGPT, and the future of AI. Topics include models as reasoning engines, AI risk, and consciousness.

Sam Altman accepts the 2023 Hawking Fellowship at the Cambridge Union and speaks about OpenAI, AGI and AI safety, recorded November 1, 2023. It includes his comments on what is left for AGI and on discovering new physics.

Sintel is a 15-minute animated fantasy short made by the Blender Foundation to develop and showcase Blender, funded by community donations and released under Creative Commons.

Part two of a StrictlyVC interview with OpenAI CEO Sam Altman, focused on AI. He discusses regulation, commodification of AI, Google's reluctance to release its own models, and best- and worst-case futures.

Lex Fridman interviews OpenAI CEO Sam Altman about GPT-4, GPT-5, Sora, the OpenAI board saga, Elon Musk, Ilya Sutskever, power and AGI. The conversation runs nearly two hours.

OpenAI's 2021 live demo of Codex translating natural language into code, from Hello World to building a game and a Microsoft Word plugin.

An OpenZFS office hours session with ZFS co-creator Matt Ahrens answering questions on topics such as hole birth time, send/receive buffers, device removal, block pointer rewrite and performance with many snapshots.

Lex Fridman's two-hour podcast with George Hotz, founder of Comma.ai, covering openpilot, autonomous driving and Hotz's views on AI and technology.

A 36C3 talk by Bunnie Huang arguing that open source is necessary but not sufficient for trustworthy hardware, because verifying hardware is destructive and so creates a time-of-check/time-of-use gap. It surveys supply chain security and classes of hardware attacks, and presents the Betrusted approach to narrowing that gap.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

Marco Reps builds and tests an open-source 8.5 digit voltmeter based on CERN's high-precision ADC design. The video walks through assembly, soldering and measurement of the resulting instrument.

A 36C3 talk that systematically evaluates OpenBSD's exploit mitigations, asking how effective they really are and what they cost in performance, complexity and inspectability. It challenges the project's security marketing.

A short live performance of Tim Minchin's comedic song about skepticism, from his DVD 'So Live'. It argues that open-mindedness shouldn't go so far that your brain falls out.

A short clip of Bernie Sanders in conversation with Ezra Klein of Vox, where he rejects open borders as a proposal that serves the Koch brothers. It is an excerpt from a longer interview on global poverty.

Bryan Cantrill's Uptime 2017 talk on the engineering challenges of the stateful data path, including storage, firmware and hardware bugs. It uses the 'zebras vs. horses' diagnostic heuristic to explain why rare failures keep appearing.

Bryan Cantrill of Oxide Computer Company gives a Stanford EE380 talk on rethinking the server. He argues that hyperscaler-style rack-scale machines with open firmware, RISC-V and Rust should be available to everyone, not just the giants.

Bob Beck of OpenBSD describes the first month of LibreSSL, the fork aimed at cleaning up OpenSSL, including oddities found in the code base and why it was cleaned rather than audited cryptographically.

Poul-Henning Kamp's FOSDEM 2014 talk is a hypothetical account of how an intelligence agency such as the NSA would sabotage open source software, standards and online discussion. It covers Skype's history, OpenSSL and psyops against standards.

Khalil Estell's CppCon 2024 talk argues C++ exceptions can reduce binary size in firmware. He digs into how exceptions work and how to shrink their code footprint on embedded platforms.

Bob Beck of OpenBSD gives a BSDCan 2014 talk on the first month of LibreSSL, the OpenSSL fork. He explains why they forked, what they removed, and examples of the problems found in the OpenSSL code base.

Elm creator Evan Czaplicki's 2018 Elm Europe talk on how to define success for an open source project and language community. It argues against judging projects by GitHub activity and touches on community expectations.

A Jordan Peterson university lecture on the Big Five trait openness to experience, covering creativity and intelligence. It explains how IQ is measured, how well it predicts life success, and the Pareto distribution of creative output.

Copenhagen's bicycle ambassador Mikael Colville-Andersen argues in a TEDx talk that bicycle helmets threaten bicycle culture. He says they distract from road design and make cycling look dangerous.

Hamish Coleman describes reverse engineering the keyboard controller in a Thinkpad and reflashing it with custom firmware. He covers how Lenovo secures its firmware, and his ongoing work on the protocol between the BIOS and the vendor flash tool.

Two Minute Papers covers OpenAI's multi-agent hide-and-seek experiment, in which agents learned emergent tool use and found ways to break the game's rules. It summarizes the 'Emergent Tool Use from Multi-Agent Interaction' paper.

Cathode Ray Dude covers two bizarre HP 'Quick Start' features: QuickLook, an offline email client built on EFI firmware, and Daystarter, which hijacks the Windows boot process. It includes an explanation of EFI applications and why HP built these things.

Ang Cui and Jonathan Voris present firmware modification attacks on networked printers at 28c3, showing how HP printers can be compromised and used as footholds for malware inside sensitive networks.

Lex Fridman's long podcast interview with Yann LeCun on Meta AI, open source, the limits of LLMs, AGI and the future of AI.

Tom Scott's video whose title shows its own live view count, and the story of how he made that work. It explains why open APIs were once common and why they largely disappeared.