Skip to content

Panel: How Research Influences Product Security

HardwareHardwear.io USA 202550 minOpen on YouTube ↗

Presenters detail vulnerability discovery and exploitation in Panel: How Research Influences Product Security.

Summary

Panel Scope and Participants

A Hardwear IO panel moderated by co-founder Aim Jakar examines how independent security research influences hardware product security. Nolan Johnson represents the research community; Nir, Jason Meltzer, and Tamara Schmidtz represent product-security roles at Winbond, Oracle Cloud Infrastructure, and Micron.

Reporting Friction

Panelists describe internal challenges when vulnerabilities surface—deciding whom to notify, triaging across chipset vendors versus OEMs, and navigating geographic and organizational barriers. Researchers note thoughtful choices about disclosure targets after findings such as Amlogic fault-injection issues.

Competitive and Cultural Tensions

Product teams acknowledge cybersecurity must be embedded across development, yet some vendors treat fixes as marketing—patching internally while competitors sharing the same silicon remain exposed. The relationship between researchers and vendors is described as bittersweet but necessary for safer products.

Improving the Relationship

Recommendations include executive education on security risk, accepting that risk cannot always be quantified cleanly, and building processes that welcome external research rather than treating it as adversarial noise.

Related talks