A Daring Space Rescue | PUF Protection | Reverse Costing

EE Times Current · 8 Mar 2020 · 38m

What this episode covers

George Leopold explains Northrup Grumman's successful docking of the MEV-1 satellite to an Intelsat satellite, marking the first in-orbit repair and extending the asset's life through refueling and repositioning. Maxim Integrated addresses IoT security vulnerabilities by integrating Physically Unclonable Function (PUF) technology, specifically Chip DNA, directly into microcontrollers to generate unique, non-stored cryptographic keys. Romain Fro, CEO of System Plus, describes their 'reverse costing' methodology, which goes beyond standard teardowns to estimate manufacturing costs by analyzing complex supply chains, yields, and indirect expenses for products like the iPhone 11 and Apple Watch 5.

Mentioned

Companies
Northrup Grumman, Intelsat, Maxim Integrated, System Plus, Apple
Products
MEV-1, Chip DNA, iPhone 11, Apple Watch 5, Concorde
Also
Romain Fro

Other shows on the same ground, closest first.

  • Embedded.fm · 58m

    414: Puff, the Magically Secure Dragon

    Laura Abbott, a firmware engineer at Oxide Computing, discusses two silicon bugs found in the NXP LPC55S69 microcontroller, including a buffer overflow in the ROM that allows cloning the device's PUF identity. She explains how she used Ghidra to reverse-engineer the undocumented ROM code and details the security implications for TrustZone and Secure Boot. The conversation also covers Oxide's approach to hiring, their use of Rust for firmware, and the challenges of working with proprietary silicon.

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

  • 022 - Bits Through the Microscope

    Chris Gerlinksy, a reverse engineering consultant from PDR North, explains how he extracts ROM data from microcontrollers by deprocessing chips and imaging them under a microscope. He details the evolution of security in PayTV smart cards, from simple 8-bit chips to modern devices with anti-tamper shields and implant ROMs that require specialized etching to reveal data. Gerlinksy also discusses the tools of the trade, including wet etching, CMP polishing, and micro-probing stations, as well as software for automating bit extraction from optical images.

  • The Amp Hour · 21m

    #397.8 - An Interview with Chris Gerlinsky

    Chris Gerlinsky, an embedded reverse engineer based on Vancouver Island, explains his work decapping chips and microprobing to extract firmware and security keys from automotive ECUs and legacy cable set-top boxes. He details the physical processes of delayering ICs using chemicals and plasma etching to expose silicon bits, and discusses how aftermarket automotive companies use these techniques to integrate non-OEM parts into closed vehicle networks. Gerlinsky also contrasts the ease of reverse-engineering older pay-TV security chips with the increasing difficulty posed by modern automotive security measures like signed code and RSA signatures.

  • Unnamed Reverse Engineering Podcast · 1h 28m

    058 - Technically Met the Specs

    Eric Schlaepfer and Windell Oskay discuss their book 'Open Circuits,' detailing the process of cutting components in half with sandpaper and grinding wheels to reveal internal structures, while Jacob Creedon, Spencer Moss, Ken, and Will McGuiness share their perspectives on reverse engineering tools like IDA Pro and Ghidra, and the legal and social implications of technology. The group debates the future of AI, the validity of NFTs, and the importance of right-to-repair legislation, with Spencer Moss from Google and Ken from Somerset Recon highlighting the increasing complexity of hardware security. Mike Ryan from Ice 9 Consulting joins to discuss Bluetooth security, the obsolescence of passwords, and the dual-use nature of technology in the context of government regulation.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by EE Times Current. The episode itself belongs to its publisher.