All posts by Paul English

DECEMBER 13: Holiday party at luisa’s mexican Grill

Date December 13, 2018
Time: 7pm
Place: Luisa’s Mexican Grill

9776 Holman Rd NW
Seattle, WA 98117

Directions: Text or message on
Subject: Festive holiday party. Talk Sysadmin, Devops, SRE and general geek. Have fun!
Presenters: None. Thank you to Fuzzy Logic for sponsoring food for SASAG!

January 11: Firmware Security Defense

Office Hours

Date January 11, 2018
Time: 7pm
Place: 1111 3rd Ave #2500

Seattle, WA

  • 98101
Directions: Text or message on

For attackers, platform firmware is the new Software. Most systems include hundreds of firmwares – UEFI or BIOS,
PCIe expansion ROMs, USB controller drivers, storage controller host and disk/SSD drivers. Firmware-level hosted
malware, bare-metal or virtualized, is nearly invisible to normal security detection tools, has full control of
your system, and can often continue running even when the system is “powered off”. Security Firms (eg, “Hacking
Team” sell UEFI 0days to the highest bidder), and government agencies include firmware-level malware (eg,
Wikileak’ed Vault7 CIA EFI malware). Defenders need to catch-up, and learn to defend their systems against
firmware-level malware. In this presentation, we’ll cover the NIST SP (147,147b,155,193) secure firmware guidance.
We’ll discuss the problem of firmware-level malware, including some of the latest vulnerabilities such as Intel
AMT, Intel ME and even a bit on Meltdown and Spectre. We’ll cover some open source tools (FlashROM, CHIPSEC, etc.)
to help detect malware on your system. You’ll also get a nice paper tri-fold copy of our CHIPSEC Quick Reference
for Sysadmins and some scary looking BadBIOS stickers for your laptop, as well as a copy of our upcoming e-book.

Food will be provided, courtesy of Fuzzy Logic.

Presenters: Lee Fisher & Paul English

Celebrate with friends, colleagues and food

March 10th Meeting: Pre-Cascadia IT Conference Meetup

Date: March 10th, 2016
Time: 7pm
Place: Hotel Deca, 4507 Brooklyn Ave NE, Seattle, WA 98105. Downstairs in the Governor Room
Subject: Pre-Conference Hangout & Chat
Presenters: YOU. Free of charge event.