Hardware Podcasts

111: Potty Train Your Tamagotchi

Embedded.fm · 29 Jul 2015 · 50m

What this episode covers

Natalie Silvanovich, a security engineer at Google's Project Zero, discusses her reverse engineering of Tamagotchi devices, ranging from early 6502-based models to modern NFC-enabled versions. She details how she bypassed General Plus mask ROM limitations using a vulnerability in programmable figure accessories to dump code and create a Tamagotchi development kit. Silvanovich also explains her 'Hardware Excuse Generator' tool and her work on Flash exploits, highlighting the contrast between high-end mobile security and low-end hardware constraints.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Bandai, Google, Blackberry
Products
Tamagotchi, Furby, Fitbit
Chips
General Plus
Tools
IDAPython, Saleae Logic Analyzer, Arduino
Also
Project Zero

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 01m

    039 - Changing the Nature of Reality

    Natalie Silvanovich, a member of Google's Project Zero, discusses her extensive reverse engineering of Tamagotchi devices, detailing how she bypassed epoxy blobs using nitric acid and exploited memory timing vulnerabilities to dump firmware from GeneralPlus chips. She explains the evolution of the devices from simple 6502-based systems to modern ARM-based models with Bluetooth, Android apps, and Unity engines, while also touching on her professional work finding remote code execution vulnerabilities in WebRTC and Flash implementations. The conversation covers the small but dedicated community of Tamagotchi hackers, including Mr. Blinky and Boulter, and highlights the tools she uses, such as IDA, Ghidra, and Frida, to analyze both hardware and software components.

    Debugging & failure analysisEmbedded firmware
    6 chapters

  • Unnamed Reverse Engineering Podcast · 1h 00m

    049 - Reversing Your Childhood One Game At a Time

    Security researcher James Chambers discusses his reverse engineering projects, including extracting firmware from a Logitech wireless keyboard using a Great FET and analyzing the letter system in the GameCube version of Animal Crossing using IDA Pro and the Dolphin emulator. He explains how he exploited a memory card feature to load custom NES ROMs and run code via DevKit Pro, and details the security mechanisms of Amiibo NFC tags using Proxmark3 and amiitool. Chambers also shares insights on console anti-piracy chips like the N64 CIC and recommends PCBite probes for hardware debugging.

    Debugging & failure analysisSecurity & privacy
    6 chapters

  • Unnamed Reverse Engineering Podcast · 55m

    002 - Cheap And Easy

    Dmitry Grinberg, a hardware hacker and reverse engineer, discusses his journey from writing PalmOS utilities as a teenager to his recent projects involving the Sega Dreamcast VMU and Cypress PSoC 4 microcontrollers. He details the technical challenges of reverse engineering the VMU's Maple bus protocol, creating an IDA Pro plugin for its custom Sanyo 68K CPU, and writing an ARM emulator to run C code on the device. Grinberg also explains how he exploited the PSoC 4's supervisory ROM to dump its firmware and uncripple lower-end chips by removing market segmentation restrictions.

    Debugging & failure analysisMicrocontrollers & dev platforms
    6 chapters

  • Unnamed Reverse Engineering Podcast · 1h 09m

    004 - 0x0FF the Rails

    Micah Scott (scanlime) discusses her career in hardware reverse engineering, detailing her work at Sifteo on resource-constrained graphics engines and her recent 'Winchbot' project for her cat Tuco. She explains the mechanical design of the winch system and the complex process of reverse engineering a FeiyuTech gimbal's encrypted firmware using Sigrok and community assistance. Scott also reflects on her past projects like CoasterMelt and her preference for tools like IPython for interactive debugging.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • Unnamed Reverse Engineering Podcast · 50m

    047 - The Sun, The Moon, The Stars

    Jen Castillo and Alvaro Prieto discuss recent reverse engineering projects, including Colin O'Flynn's teardown of the Apple AirTag, which revealed an nRF52 microcontroller and a vulnerability allowing firmware dumping via the Pocket Glitcher. They also cover a method to transmit arbitrary data through Apple's Find My network, a 70% reduction in GTA Online loading times by patching a slow JSON parser, and reverse engineering of Reolink IP cameras and eInk price tags. The hosts highlight past guests' work on the LPC55S69 microcontroller and the Asahi Linux project for the Apple M1 processor, noting a trend toward better security practices in hardware design.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.