The LVFS is a project used by over 130 different vendors, from all positions of the supply chain. It decompresses, decompiles, then analyses firmware looking for issues, and then automatically builds a SBoM for each download.
Segment Resources: https://fwupd.org/ https://github.com/fwupd
This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!
Richard has over 20 years of experience developing open source software, 15 of which at Red Hat. He is the maintainer of the LVFS, fwupd, libxmlb, ODRS, the original creator of GNOME Software, AppStream-glib, PackageKit, colord, and UPower and also contributes to many other projects and open-source standards.
Richard graduated in 2007 from the University of Surrey with a Masters in Electronics Engineering. He now works as a Senior Principal Software Engineer for Red Hat, and once built a company selling open source calibration equipment. Richard’s outside interests include taking photos, eating good food and looking after his two daughters.
