Hardware Podcasts

312: Two Meter Exhaust Port

Embedded.fm · 6 Dec 2019 · 1h 02m · Episode 312

What this episode covers

Hosts Elecia White and Christopher White discuss how security vulnerabilities are exploited in embedded systems, using a fictional VoIP speaker phone as a case study for threat modeling. They explain the mechanics of buffer overflow attacks, detailing how stack corruption allows attackers to execute arbitrary code, and cover injection prevention and the risks of insecure firmware update mechanisms. The conversation emphasizes the importance of OWASP Embedded Application Best Practices, securing sensitive data, and conducting threat modeling to balance security with manufacturing constraints.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Intoworking Labs, DigitalNEST
Chips
Cortex-M4
Tools
Wireshark, GDB, IDA
Also
OWASP, VxWorks, XKCD, BusyBox, Yocto, Buildroot, OpenSSL

Related episodes from other shows

Other shows on the same ground, closest first.

  • IoT For All Podcast · 44m

    Breaking Embedded IoT Systems | Ken Munro, Partner at Pen Test Partners | #IoTMakers E036

    Ken Munro, Partner at Pen Test Partners, explains how his team conducts 'vanilla research' by purchasing and breaking embedded IoT devices to find security vulnerabilities, such as the My Friend Kayla doll and smart heated drinks cups. He argues that security is often treated as an afterthought by startups, leading to catastrophic failures when wrong chipsets are chosen early in development, making over-the-air updates impossible. Munro details the responsible disclosure process, noting that when vendors ignore or stonewall reports, companies often go out of business, and he advocates for government regulation like California's SB 327 to enforce reasonable security controls.

    Security & privacyStarting a product company
    8 chapters

  • Unnamed Reverse Engineering Podcast · 46m

    007 - Candy Coated

    M. Carlton, VP of Research at Senrio, discusses her team's discovery of 'Devil's Ivy,' a critical stack buffer overflow vulnerability in the GSOAP library used by Axis Communications and other IoT device manufacturers. She details the reverse engineering process for the Axis M300 camera, the tools used (IDA Pro, Binwalk), and the rapid patching response by Axis. The conversation also covers Senrio's transition from security consulting to a network visibility product, advice for securing IoT devices, and the career paths of reverse engineers.

    Debugging & failure analysisSecurity & privacy
    7 chapters

  • The Pragmatic Embedded Podcast · 48m

    Offensive Cybersecurity with Ryan Torvik

    Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

    Security & privacyEmbedded firmware
    10 chapters

  • Unnamed Reverse Engineering Podcast · 55m

    042 - Diwali in the Morning

    Asmita Jha, an IoT security consultant at Payatu, discusses her transition from embedded firmware development to hardware security and reverse engineering. She details her workflow for analyzing IoT devices like routers and cameras, covering techniques for extracting firmware, decrypting images, and using tools like Ghidra, Binwalk, and QEMU. Jha also shares advice on secure firmware development, emphasizing the importance of avoiding hardcoded credentials and implementing proper secure boot mechanisms.

    Embedded firmwareEDA & CAD tools
    7 chapters

  • Coredump Sessions · 57m

    #002: The secrets to building secure & scalable OTA infrastructure with Nick Sinas

    Nick Sinas, CTO at Oval, and Chris Coleman, CTO at Memfault, discuss the critical importance of Over-the-Air (OTA) updates for connected devices, emphasizing that OTA must be designed into the hardware architecture from day one. They detail the technical requirements for secure, scalable OTA systems, including bootloader design, memory management, and cloud-side cohort rollouts to mitigate fleet-wide risks. The conversation highlights real-world failures, such as breaking future update capabilities due to stack overflow fixes, and stresses the need for rigorous testing, security best practices like signing keys, and fallback mechanisms like dual-bank architectures.

    Embedded firmwareSecurity & privacy
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.