[mdriley]

Sure, it's easy enough to find network-attached screens. The hard part is giving those screens access to anything without them showing up as vectors for every Red Team exercise.

Gizmos are used for basically any screen at Facebook that needs to display "live" information -- conference rooms, building maps, monitoring dashboards, etc. Each one has a provisioned identity protected by secure boot and hardware root of trust. They have a minimum of onboard storage (maybe even nothing mutable/persistent after boot?) so they're not a foothold for persistence.

[rkachowski]

So they're essentially Facebook's internal raspberry pi with a ton of accessories + focus on not becoming security nightmares?