# 311: Attack Other People's Refrigerators

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2019-11-22
- Length: 1h 08m
- Episode: 311
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators
- Listen: https://makingembeddedsystems.libsyn.com/311-attack-other-peoples-refrigerators

## Summary

Rick Altherr, a security researcher at Eclypsium and former engineer at Apple and Google, discusses firmware security, threat modeling, and the challenges of securing IoT devices like refrigerators. He explains how adding connectivity expands attack surfaces and details the STRIDE framework and OWASP guidelines for evaluating risks. Altherr also shares insights on his career path, the importance of mentorship, and his technical hobbies including reverse engineering FPGA bitstreams and car ECUs.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=6) Introduction and Lightning Round
- [5:17](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=317) The Evolution of Firmware Security and Threat Modeling
- [10:06](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=606) IoT Attack Surfaces: The Refrigerator Example
- [16:31](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=991) Industry Practices: GE Appliances and Security Awareness
- [19:42](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=1182) Practical Security Steps and OWASP STRIDE Framework
- [30:20](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=1820) Supply Chain Complexity and CVEs
- [35:28](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=2128) Responsible Disclosure and Vulnerability Management
- [40:22](https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators#t=2422) Career Path, Mentorship, and Personal Hobbies

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)
- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)

## Most relevant to

large enterprises

## Mentioned

- Eclypsium (company)
- Apple (company)
- Google (company)
- OWASP (other)
- GE Appliances (company)
- Nordic (company)
- MITRE (company)
- Clifford Wolf (other)
- iCE40 (chip)

## Related episodes from other shows

- [How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-05-15-how-to-discover-handle-iot-firmware-vulnerabilities-terry-dunlap-co-founder-ceo) (IoT For All Podcast)
- [042 - Diwali in the Morning](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2020-11-24-042-diwali-in-the-morning) (Unnamed Reverse Engineering Podcast)
- [Internet of Things Security: What To Know | SmartSense by Digi's Gil Dror | Internet of Things Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2023-06-01-internet-of-things-security-what-to-know-smartsense-by-digis-gil-dror-internet-o) (IoT For All Podcast)
- [Biggest Firmware Vulnerabilities & How to Fix Them | NetRise's Thomas Pace | Internet of Things Podcast](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2023-01-26-biggest-firmware-vulnerabilities-how-to-fix-them-netrises-thomas-pace-internet-o) (IoT For All Podcast)
- [What Are the Security Implications of IoT? | Andrew Howard, CTO at Kudelski Security | #AskIoT E020](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-03-28-what-are-the-security-implications-of-iot-andrew-howard-cto-at-kudelski-security) (IoT For All Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2019-11-22-311-attack-other-peoples-refrigerators. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.