Security Researcher Trammell Hudson and Device Maker Purism Join Forces to Set a New Standard for Security-Focused Laptops

SAN FRANCISCO, CA--(Marketwired - April 12, 2017) - One of the foremost security researchers in the infosec community, Trammell Hudson, is working with secure device maker Purism to integrate his free and open-source "Heads" firmware into the company's Librem laptop line. Purism will be the first hardware company to integrate Heads into its products, and the partnership will push the industry standard with unprecedented protection for end-user devices. Testing has already begun for the integration of the two platforms.

When integrated into Purism Librem hardware, Heads will provide cryptographic verification of the system's firmware and operating system -- using CPU features like Bootguard, flash protection and a TPM -- to provide a strong hardware "root of trust" while also allowing more advanced users to modify their own systems and securely install their own custom firmware.

Purism coreboot-enabled hardware is already immune to widespread attacks against EFI/UEFI firmware (threats that have been documented in the "Vault 7" CIA documents leak); adding Heads enables cryptographically signing the lowest levels, allowing users to protect their devices against third-party modification. Conventional security approaches such as antivirus and malware detection programs are no longer enough to keep out attackers and criminals in today's online world. Purism's vision in working with Hudson to integrate Heads is to increase the safety of individuals and organizations through this technological advancement.

The imperative for computer makers to implement better stewardship models to increase individuals' protection is evident, as 2017 has been a hallmark year for privacy and security concerns and individuals' protection rollbacks:

• Last month, Congress voted to roll back the FCC's recent privacy rules for ISPs, opening up the potential for subscriber data, including browser history, to be used for marketing and sales purposes.
• According to digital security firm Gemalto, data breaches were up 86 percent in 2016.
• A recent PEW study, released last month about public knowledge of cybersecurity, found that many online adults are uneducated about the ins and outs of digital rights and privacy.
• There has been a chilling effect on users as a result of these changes: in a report released last year by the National Telecommunications and Information Administration, forty-five percent of online households reported that privacy and security concerns discouraged them from online purchases and sharing their views on social media or elsewhere on the internet.

This demonstrates a clear need for both increased education about these topics, and devices that put users first and empower use of security measures to give them peace of mind about engaging online.

"Purism's Librem laptops are ideally suited for the philosophy of the Heads firmware project -- Purism is manufacturing modern hardware designed to allow the users to have control of their own systems," said Trammell hudson, well-known information security researcher and founder of the Heads project. "They are the only vendor that allows users to establish their own hardware root of trust with CPU features like Bootguard, and their support for coreboot and Heads improves security by being open, auditable, flexible and measured."

"We are ecstatic about the partnership between Purism and Heads, especially being able to work closely with Trammell who has proven himself an unadulterated security expert. We have begun co-developing a solution to advance our goals of privacy and security for everyone. This union represents the ideal approach to protecting users by default, without sacrificing convenience or usability," said Todd Weaver, CEO of Purism. "Including Heads is a natural fit with both the functionality and ideology of the Purism Librem laptops."

About the Purism Librem

Purism's goal with the Librem laptop is to offer a high-end computer with a simple, out-of-the-box, secure computing environment usable by ordinary users with ease.

Librem laptops feature customized components designed to increase security and freedom for end-users, including coreboot, a neutralized Intel Management Engine, an Intel CPU shipped unfused in "manufacturing mode" and without vPro, Intel AMT avoidance, and many other features that make this partnership possible on a technical level.

About Heads

Heads is a free and open-source custom firmware and OS configuration, intended to provide physical security and protection for data on laptops and servers. Heads is the result of several years of firmware vulnerability research and collaboration in the infosec community. Combining physical hardening of specific hardware platforms and flash security features, Heads allows moving the "root of trust" into the write-protected ROM and preventing further modifications to the bootup code.

As it controls the first instruction the CPU executes, Heads can measure every step of the boot process using a Trusted Platform Module, making it possible to attest to the user that the firmware has not been tampered with. Once the system is in a known good state, the TPM can be used as a hardware key storage to decrypt the main storage drives.

Additionally, Heads allows the hypervisor, kernel and initrd images to be signed by keys controlled by the user, in addition to the ability of the operating system to use a signed, immutable root filesystem so that any software exploits attempting to gain persistence will be detected.

About Trammell Hudson

Trammell has been researching hardware and firmware security topics for many years, such as the "Thunderstrike" (and "Thunderstrike 2") firmware rootkits on Apple Macbooks, as well as techniques for reducing the functionality of the Intel Management Engine. He also started the "Magic Lantern" project, an open runtime for the Canon DSLR cameras that allows users to take control of their own devices.

About Purism

Purism is a Social Purpose Corporation devoted to bringing security, privacy, software freedom, and digital independence to everyone's personal computing experience. With operations based in San Francisco (California) and around the world, Purism manufactures premium-quality laptops and tablets, creating beautiful and powerful devices meant to protect users' digital lives without requiring a compromise on ease of use. Purism designs and assembles its hardware in the United States, carefully selecting internationally sourced components to be privacy-respecting and fully Free-Software-compliant. Security and privacy-centric features come built-in with every product Purism makes, making security and privacy the simpler, logical choice for individuals and businesses.

Image Available: http://www.marketwire.com/library/MwGo/2017/4/11/11G135680/Images/todd-weaver-150x150_copy-79a5a01a7c7298879dc0f67f914f3cb2.jpg
Image Available: http://www.marketwire.com/library/MwGo/2017/4/11/11G135680/Images/trammell-hudson-150x150-4dbcd189546b8c02818379f8aa6afdbd.jpg
Image Available: http://www.marketwire.com/library/MwGo/2017/4/11/11G135680/Images/librem_family-0771bd7836b8baf8a46b2490753d8b90.jpg