# 431: Becoming More of a Smurf

- Show: [Embedded.fm](https://hardwarepodcasts.com/podcast/embedded-fm)
- Published: 2022-10-20
- Length: 1h 05m
- Episode: 431
- Page: https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf
- Listen: https://embedded.fm/episodes/431

## Summary

Jasper van Woudenberg, CTO of Riscure North America and co-author of the Hardware Hacking Handbook with Colin O'Flynn, discusses the seven-year process of writing the book and the evolving landscape of hardware security. He explains how vulnerabilities like Spectre and Meltdown emerged during the writing process, forcing multiple rewrites, and details the shift from red-team hacking to blue-team defense, or 'becoming a Smurf.' The conversation covers specific attack vectors including side-channel analysis, fault injection, and remote exploitation via ADCs, as well as the ethical implications of publishing hardware vulnerabilities.

## Chapters

- [0:06](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=6) Introduction: Jasper van Woudenberg and Riscure
- [4:47](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=287) Writing the Hardware Hacking Handbook with Colin O'Flynn
- [5:48](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=348) Updating the Book for Spectre, Meltdown, and Deep Learning
- [9:59](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=599) Logic Analysis vs. Side-Channel Analysis and Fault Injection
- [13:43](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=823) Countermeasures: Tilt Sensors, Lasers, and Redundancy
- [19:13](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=1153) Physical vs. Remote Hardware Attacks and Risk Calculus
- [28:35](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=1715) Low-Cost Hardware Hacking: VMs, ChipWhisperer, and CheapSCAte
- [30:09](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=1809) Ethics of Publishing Hardware Vulnerabilities and Patching
- [47:47](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=2867) Speculative Execution Vulnerabilities and CPU Mitigations
- [51:44](https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf#t=3104) Becoming a 'Smurf': From Red Team to Blue Team Defense

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)
- [Sensors & measurement in products](https://hardwarepodcasts.com/topic/sensors)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Intellectual property](https://hardwarepodcasts.com/topic/intellectual-property)

## Most relevant to

early-stage companies

## Mentioned

- Riscure (company)
- Hardware Hacking Handbook (product)
- Colin O'Flynn (other)
- ChipWhisperer (product)
- Spectre (other)
- Meltdown (other)
- PlayStation 3 (product)
- CheapSCAte (other)
- Google Project Zero (company)

## Related episodes from other shows

- [An Interview with Joe FitzPatrick](https://hardwarepodcasts.com/podcast/the-amp-hour/2017-06-05-an-interview-with-joe-fitzpatrick) (The Amp Hour)
- [Shouting at chips with Colin O'Flynn](https://hardwarepodcasts.com/podcast/the-amp-hour/2021-08-02-shouting-at-chips-with-colin-oflynn) (The Amp Hour)
- [An Interview with Dmitry Nedospasov](https://hardwarepodcasts.com/podcast/the-amp-hour/2016-06-17-an-interview-with-dmitry-nedospasov) (The Amp Hour)
- [Ep. 28 | How DARPA Stops IC Hardware Hackers in Their Tracks: Insights from Serge Leef](https://hardwarepodcasts.com/podcast/moores-lobby/2021-08-24-ep-28-how-darpa-stops-ic-hardware-hackers-in-their-tracks-insights-from-serge-le) (Moore's Lobby)
- [020 - Hardwear.io CTF Interviews](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2019-06-16-020-hardwear-io-ctf-interviews) (Unnamed Reverse Engineering Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/embedded-fm/2022-10-20-431-becoming-more-of-a-smurf. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Embedded.fm.