111: Potty Train Your Tamagotchi (Repeat)

Embedded.fm · 19 Jul 2017 · 50m

What this episode covers

Natalie Silvanovich, a security engineer at Google Project Zero, discusses her reverse engineering of Tamagotchi devices, detailing how she dumped code from General Plus 6502-based hardware and created a development kit. She explains the technical challenges of working with mask ROM, undocumented processors, and the specific vulnerabilities in Tamagotchi 'figures' that allowed for code execution. Silvanovich also touches on her broader career in hardware and software security, including her work on Flash exploits and the 'Hardware Excuse Generator' tool.

Mentioned

Companies
Bandai, Project Zero
Products
Tamagotchi, Flash, Hardware Excuse Generator
Chips
General Plus, NFC
Tools
IDA, Saleae Logic Analyzer, Arduino

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 01m

    039 - Changing the Nature of Reality

    Natalie Silvanovich, a member of Google's Project Zero, discusses her extensive reverse engineering of Tamagotchi devices, detailing how she bypassed epoxy blobs using nitric acid and exploited memory timing vulnerabilities to dump firmware from GeneralPlus chips. She explains the evolution of the devices from simple 6502-based systems to modern ARM-based models with Bluetooth, Android apps, and Unity engines, while also touching on her professional work finding remote code execution vulnerabilities in WebRTC and Flash implementations. The conversation covers the small but dedicated community of Tamagotchi hackers, including Mr. Blinky and Boulter, and highlights the tools she uses, such as IDA, Ghidra, and Frida, to analyze both hardware and software components.

  • 002 - Cheap And Easy

    Dmitry Grinberg, a hardware hacker and reverse engineer, discusses his journey from writing PalmOS utilities as a teenager to his recent projects involving the Sega Dreamcast VMU and Cypress PSoC 4 microcontrollers. He details the technical challenges of reverse engineering the VMU's Maple bus protocol, creating an IDA Pro plugin for its custom Sanyo 68K CPU, and writing an ARM emulator to run C code on the device. Grinberg also explains how he exploited the PSoC 4's supervisory ROM to dump its firmware and uncripple lower-end chips by removing market segmentation restrictions.

  • Unnamed Reverse Engineering Podcast · 1h 00m

    049 - Reversing Your Childhood One Game At a Time

    Security researcher James Chambers discusses his reverse engineering projects, including extracting firmware from a Logitech wireless keyboard using a Great FET and analyzing the letter system in the GameCube version of Animal Crossing using IDA Pro and the Dolphin emulator. He explains how he exploited a memory card feature to load custom NES ROMs and run code via DevKit Pro, and details the security mechanisms of Amiibo NFC tags using Proxmark3 and amiitool. Chambers also shares insights on console anti-piracy chips like the N64 CIC and recommends PCBite probes for hardware debugging.

  • Unnamed Reverse Engineering Podcast · 1h 09m

    004 - 0x0FF the Rails

    Micah Scott (scanlime) discusses her career in hardware reverse engineering, detailing her work at Sifteo on resource-constrained graphics engines and her recent 'Winchbot' project for her cat Tuco. She explains the mechanical design of the winch system and the complex process of reverse engineering a FeiyuTech gimbal's encrypted firmware using Sigrok and community assistance. Scott also reflects on her past projects like CoasterMelt and her preference for tools like IPython for interactive debugging.

  • 001 - Success!

    Jen Castillo and Alvaro Prieto launch the 'Unnamed Reverse Engineering Podcast' to discuss hardware and firmware reverse engineering, a niche they feel is underserved compared to software-focused shows. They define reverse engineering through hobbyist projects, professional competitive analysis, and security research, citing examples like Jillian Ellsworth's Commodore 64 chip reverse engineering and Dmitry Grinberg's Dreamcast VMU hack. The hosts share personal anecdotes, including Alvaro's early PHP form processor security faux pas and Jen's experience debugging DTMF tone generators and VoIP voice degradation in call center equipment.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.