# 312: Two Meter Exhaust Port

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2019-12-06
- Length: 1h 02m
- Episode: 312
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port
- Listen: https://makingembeddedsystems.libsyn.com/312-two-meter-exhaust-port

## Summary

Hosts Elecia White and Christopher White discuss how security vulnerabilities are exploited in embedded systems, using a fictional VoIP speaker phone as a case study for threat modeling. They explain the mechanics of buffer overflow attacks, detailing how stack corruption allows attackers to execute arbitrary code, and cover injection prevention and the risks of insecure firmware update mechanisms. The conversation emphasizes the importance of OWASP Embedded Application Best Practices, securing sensitive data, and conducting threat modeling to balance security with manufacturing constraints.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=6) Introduction: DigitalNEST Grant and Show Format
- [3:02](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=182) Threat Modeling: Reverse Engineering a VoIP Speaker
- [12:41](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=761) Buffer Overflow Mechanics and Stack Corruption
- [26:11](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=1571) Injection Prevention and Input Sanitization
- [35:48](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=2148) Firmware Update Security and Cryptographic Signatures
- [40:36](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=2436) Securing Sensitive Information and Key Management
- [47:42](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=2862) Debug Interfaces, Security Fuses, and Manufacturing
- [53:05](https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port#t=3185) Threat Modeling Process and Script Kiddies

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Manufacturing partners & offshoring](https://hardwarepodcasts.com/topic/manufacturing-partners)

## Most relevant to

early-stage companies

## Mentioned

- OWASP (other)
- Wireshark (tool)
- VxWorks (other)
- XKCD (other)
- Intoworking Labs (company)
- DigitalNEST (company)
- Cortex-M4 (chip)
- BusyBox (other)
- Yocto (other)
- Buildroot (other)
- OpenSSL (other)
- GDB (tool)
- IDA (tool)

## Related episodes from other shows

- [Breaking Embedded IoT Systems | Ken Munro, Partner at Pen Test Partners | #IoTMakers E036](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-08-07-breaking-embedded-iot-systems-ken-munro-partner-at-pen-test-partners-iotmakers-e) (IoT For All Podcast)
- [007 - Candy Coated](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2018-01-03-007-candy-coated) (Unnamed Reverse Engineering Podcast)
- [Offensive Cybersecurity with Ryan Torvik](https://hardwarepodcasts.com/podcast/the-pragmatic-embedded-podcast/2025-04-09-offensive-cybersecurity-with-ryan-torvik) (The Pragmatic Embedded Podcast)
- [042 - Diwali in the Morning](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2020-11-24-042-diwali-in-the-morning) (Unnamed Reverse Engineering Podcast)
- [#002: The secrets to building secure & scalable OTA infrastructure with Nick Sinas](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-12-18-002-the-secrets-to-building-secure-scalable-ota-infrastructure-with-nick-sinas) (Coredump Sessions)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2019-12-06-312-two-meter-exhaust-port. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.