Panel: How Research Influences Product Security
Presenters detail vulnerability discovery and exploitation in Panel: How Research Influences Product Security.
Summary
Panel Scope and Participants
A Hardwear IO panel moderated by co-founder Aim Jakar examines how independent security research influences hardware product security. Nolan Johnson represents the research community; Nir, Jason Meltzer, and Tamara Schmidtz represent product-security roles at Winbond, Oracle Cloud Infrastructure, and Micron.
Reporting Friction
Panelists describe internal challenges when vulnerabilities surface—deciding whom to notify, triaging across chipset vendors versus OEMs, and navigating geographic and organizational barriers. Researchers note thoughtful choices about disclosure targets after findings such as Amlogic fault-injection issues.
Competitive and Cultural Tensions
Product teams acknowledge cybersecurity must be embedded across development, yet some vendors treat fixes as marketing—patching internally while competitors sharing the same silicon remain exposed. The relationship between researchers and vendors is described as bittersweet but necessary for safer products.
Improving the Relationship
Recommendations include executive education on security risk, accepting that risk cannot always be quantified cleanly, and building processes that welcome external research rather than treating it as adversarial noise.
Related talks
BSidesSF 2025·31 min
Jack Cable
Engineers explore architecture and security mechanisms for The Product Security Imperative: Lessons from CISA (Jack Cable).
FIRST·1 hr 18 min
Engineers explore architecture and security mechanisms for EU CRA TL/DR for PSIRTS - What Product Security Needs To Do To Be Compliant with the CRA.
FIRST·42 min
Industry experts analyze emerging threats surrounding Product Security Incident Response at a Fortune 500 SaaS.


