Dead Printers Tell No Tales

We've talked about Oxide's Root of Trust--the hardware underpinning the security of the product--but how do we keep a bad actor from spoofing Oxide to load malicious software? Philip Tricca joined Bryan and Adam to describe the key ceremony, the process of creating and storing the secret that plays a critical role in manufacturing. And we paid our respects to the dot matrix printers that made the ultimate sacrifice in the name of security.
In addition to Bryan Cantrill and Adam Leventhal, our special guest was Philip Tricca.
Previously, on Oxide and Friends:
OxF s01e15 - Theranos, Silicon Valley, and the March Madness of Tech Fraud
OxF s04e28 - Books in the Box IV
OxF s06e07 - Building a Quorum of Trust in the Oxide Rack
OxF s03e18 - Okay, Doomer: A Rebuttal to AI Doom-mongering
Some of the topics we hit on, in the order that we hit them:
You Can See Everything (A24)
IANA: Root KSK Ceremonies
Caliptra
IANA YouTube: live streams
RFD 585: Cosmo RoT Code Signing Ceremony
RFD 605: Virtual Machine Identity and Attestation
NLnet Labs: DNSSEC Offline KSK Ceremony Tools
If we got something wrong or missed something, please file a PR! Our next show will likely be on Monday at 5p Pacific Time on our Discord server; stay tuned to our Mastodon feeds for details, or subscribe to this calendar. We'd love to have you join us, as we always love to hear from new speakers!