# 229: Slinky with a Lot of Math

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2018-01-12
- Length: 1h 21m
- Episode: 229
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math
- Listen: https://makingembeddedsystems.libsyn.com/slinky-with-a-lot-of-math

## Summary

Nick Kartsioukas, an information security engineer known as ExplodingLemur, discusses the practical application of threat modeling, the mechanics of Spectre and Meltdown vulnerabilities, and essential user-level security hygiene. He explains how speculative execution and cache timing attacks allow user-space processes to leak kernel memory, highlighting the difficulty of patching legacy industrial and medical systems. For general users, he recommends using password managers, two-factor authentication, and ad blockers, while emphasizing the importance of data backups and mental health resources.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=6) Introduction: Nick Kartsioukas and Information Security
- [5:03](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=303) Day-to-Day Security Engineering and Risk Assessment
- [18:16](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=1096) Cryptography for Embedded Systems and Serious Cryptography
- [21:51](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=1311) Spectre and Meltdown: Speculative Execution and Cache Timing
- [28:26](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=1706) Two-Factor Authentication Methods and Biometric Risks
- [1:05:01](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=3901) Patching Challenges in Industrial and Medical Environments
- [1:10:20](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=4220) Ham Radio, APRS, and Emergency Preparedness
- [1:16:45](https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math#t=4605) Mental Health in Information Security

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)
- [Certification & compliance](https://hardwarepodcasts.com/topic/certification-and-compliance)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)
- [Sourcing & supply chain](https://hardwarepodcasts.com/topic/sourcing-and-supply-chain)

## Most relevant to

early-stage companies

## Mentioned

- No Starch Press (company)
- U-Block Origin (tool)
- Stuxnet (other)
- CIS 20 (other)
- YubiKey (product)

## Related episodes from other shows

- [Hardware Security with Matt Brown](https://hardwarepodcasts.com/podcast/the-amp-hour/2025-07-17-hardware-security-with-matt-brown) (The Amp Hour)
- [011 - Making Too Many Assumptions](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2018-06-03-011-making-too-many-assumptions) (Unnamed Reverse Engineering Podcast)
- [Common Cybersecurity Threats and What to Do about Them with Dana Mantilia](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2021-11-09-common-cybersecurity-threats-and-what-to-do-about-them-with-dana-mantilia) (Manufacturing Happy Hour)
- [Adventures in Data Corruption](https://hardwarepodcasts.com/podcast/oxide-and-friends/2025-07-10-adventures-in-data-corruption) (Oxide and Friends)
- [Finding Hardware Flaws with Laura Abbott](https://hardwarepodcasts.com/podcast/the-amp-hour/2022-05-23-finding-hardware-flaws-with-laura-abbott) (The Amp Hour)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2018-01-12-229-slinky-with-a-lot-of-math. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.