Inside the Yocto Project's Evolving Tooling: SBOMs, SPDX 3.0, and Secure Embedded Systems

Nerding Out With Viktor

Player FM - Internet Radio Done Right

הוסף לפני thirty-one שבועות

תוכן מסופק על ידי Viktor Petersson. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Viktor Petersson או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

Subtext and Discourse | Art World Podcast

1
From Conflict Zones to Community Change: Mark Neville on Photography as Activism 45:16

לפני 6 weeks45:16

הפעל מאוחר יותר

רשימות

לייק

אהבתי

45:16

What happens when photography becomes a tool for social change rather than just documentation? In this episode, Michael Dooney speaks with acclaimed British photographer and artist Mark Neville about his journey from art school to the front-lines of conflict, and how he uses collaborative photography projects to empower communities, challenge social norms, and effect real-world impact. Neville shares stories from his time as an official war artist in Afghanistan, discusses the making of influential projects like The Port Glasgow Book Project and Stop Tanks With Books , and reflects on his ongoing work in Ukraine. Listeners will gain insights into the ethics of documentary practice, the power of art as activism, and what it means to make photography for—and with—the people it represents. Timestamps (00:00) – Introduction and welcome (01:49) – Artist and photographer living and working in the Ukraine (04:54) – The Port Glasgow Book Project: Art for the community (08:04) – Getting attention of the art world (12:00) – Turning point towards a social engaged artistic practice (14:42) – Stop Tanks with Books Project: Art as activism in Ukraine (17:56) – Russian invasion of Ukriane (20:55) – Postcode Ukraine Charity (25:06) – War Artist in Helmand, Afghanistan (27:33) – Battle Against Stigma, book project (33:34) – Invitation to start making work in Ukraine (34:54) – Diary of a Volunteer, book project (37:51) – Individual experiences of Postcard Ukraine charity members (39:48) – Support for Ukrainian people (42:06) – How can listeners learn more and get involved? Mark Neville (b. 1966, London) is a British artist and photographer renowned for his socially engaged practice at the intersection of art, documentary, and activism. His projects often involve close collaboration with communities, aiming to empower subjects and address issues such as inequality, mental health, and conflict. Notable works include The Port Glasgow Book Project , Battle Against Stigma , Fancy Pictures , and Stop Tanks With Books . Neville has exhibited internationally, worked as an official war artist in Afghanistan, and was nominated for the Pulitzer Prize by The New York Times in 2012. Mark Neville official website: https://www.markneville.com/ Instagram page: https://www.instagram.com/marknevillestudio/ Postcode Ukraine: https://www.postcodeukraine.com/ This episode of Subtext & Discourse Art World Podcast was recorded on 28. March 2025 between Perth (AU) and Ukraine with Riverside . Michael Dooney official website: https://www.michaeldooney.net Instagram page: https://www.instagram.com/michaeldooney/…

לפני שנה 50:37

MP4•בית הפרקים

In this episode of Nerding Out with Viktor, host Viktor Petersson speaks with Joshua Watt of Garmin and Ross Burton of ARM to explore how the Yocto Project is evolving to meet the growing demands of software supply chain security, embedded Linux customization, and long-term product maintenance. As two long-time contributors to Yocto and OpenEmbedded, Joshua and Ross share hard-earned insights on how build-time Software Bill of Materials (SBOMs) offer deeper accuracy and compliance benefits compared to traditional post-build analysis. They dig into how the integration of SPDX 3.0 in Yocto enables better license tracking, reproducibility, and component transparency, critical features for developers building connected products in regulated industries like industrial IoT, telecom, and automotive. The conversation also covers how VEX metadata can be used to prioritize vulnerabilities in real-world environments, and why reproducible builds using BitBake's hashserver infrastructure are becoming a cornerstone of secure firmware development. As global regulatory frameworks like the EU Cyber Resilience Act (CRA) push for stricter transparency and vulnerability management, the Yocto Project's native SBOM tooling is helping teams future-proof their embedded Linux stacks. Joshua and Ross also discuss the challenges of managing multi-layer board support packages (BSPs), handling closed-source components responsibly, and navigating SBOM creation across vendors in complex system builds. This episode is a must-listen for embedded engineers, firmware architects, and product teams who want to build secure, scalable Linux-based devices while staying ahead of compliance and lifecycle management needs.

]]>

39 פרקים

#Tech #Viktor Petersson