Protecting devices from malicious use is often a cat-and-mouse game between security researchers identifying software vulnerabilities (CVEs) and product-makers patching them before attackers can exploit them. As a result, devices can no longer be developed, shipped and forgotten. Instead, manufacturers must commit to keeping those devices up to date and free from critical vulnerabilities for …
Author: Andrew Murray
Xmas Charity Fundraiser 2024
This Xmas The Good Penguin is raising money for Alzheimer’s Society, a charity that aims to end the devastation cause by dementia by giving vital support to those who need it, funding research and by campaigning for change. Dementia, which can be caused by many diseases including Alzheimer’s, describes a set of symptoms that can …
ETSI EN 303 645: Cyber Security for Consumer Internet of Things
We increasingly rely on internet connected devices in our day-to-day lives, with consumer devices that include door bell cameras, thermostats, children’s toys and home assistants. However the cyber security of these devices doesn’t always live up to the trust we place in them to reliability perform their function and protect our personal data. It’s often …
The Good Penguin opens an Office in Newport, Wales
The Good Penguin is and has always been a fully-remote business with our employees based all across the UK. Being fully-remote allows us to hire the best engineers wherever they may be found – a significant benefit given the rare to find skills that are required for the specialist work we do. However, as our …
The Good Penguin speaks at the Embedded Open Source Summit 2024 in Seattle
Earlier this year, our founder Andrew Murray presented a talk at the Embedded Open Source Summit 2024 in Seattle. The talk was about SD cards, their performance and reliability. The synopsis of the talk follows: “The underlying storage of an SD card is NAND flash, which is inherently unreliable, has a limited number of program/erase …
Handling Security Vulnerabilities in Yocto Scarthgap
The latest Long Term Support (LTS) version of Yocto was released last month with the code name “Scarthgap” – presumably named after a mountain pass in the Lake District national park. It promises 4 years of support, meaning regular point releases with security and bug fixes. In the context of increasing regulatory requirements for cyber …
A Year in Review: 2023 at The Good Penguin
It’s already 2024 and we have absolutely no idea what happened to January – it’s been pretty busy so far this year. However, as we come up for air we thought it would be the perfect opportunity to look back at our highlights of 2023. We’d also like to give thanks and appreciation for our …
Xmas Charity Fundraiser 2023
This Xmas The Good Penguin is raising money for Macmillan Cancer Support, a charity that supports people living with cancer. The UK population is growing and shifting towards older ages – these two changes, combined with improvements in cancer diagnosis and treatment mean that more people will be affected by cancer and will live longer …
The Good Penguin achieves ISO 9001:2015 Certification
At The Good Penguin, customer satisfaction has always been of utmost importance to us – we know that keeping our customers happy results in long term relationships which provide mutual benefits. For our customers, they gain a reliable and trusted software partner that delivers excellent value. And for us it provides repeat business and customer …
Everything you ought to know (and more) about Yocto’s SDK and Extensible SDK (eSDK)
Yocto is so widely used because of the many benefits it provides to engineers that wish to build customised Linux distributions. However, it does have pain points. One such pain point relates to the difficulty of getting a Yocto development environment setup in the first place – this often involves using third-party tools such as …