Hardware Podcasts

519: The Password Is All Zeros

Embedded.fm · 23 Jan 2026 · 1h 06m · Episode 519

What this episode covers

Mark Omo and James Rowley from Marcus Engineering discuss their research into SECURAM safe locks, revealing that the ProLogic series contains critical security flaws, including a debug port password set to all zeros and codes stored on the external keypad. They detail two exploits, 'code snatch' and 'reset heist,' which allow unauthorized access to safes used for pharmaceuticals and cash, despite UL high-security certification. The conversation covers the ethical and legal challenges of responsible disclosure, including threats from SECURAM's legal team and support from the EFF's Coders' Rights Project.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
SECURAM, Marcus Engineering, Liberty Safe, Electronic Frontier Foundation
Products
PS4
Tools
ChipWhisperer, Flipper Zero
Also
NISTIR 8259, UL, hardwear.io

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 05m

    074 - This Coconut Won't Open

    Noah Holland and Joshua Stiebel, from the Michigan Tech Red Team, discuss their reverse engineering of Dormakaba's SafeLock electronic access control systems. They detail how they discovered vulnerabilities in the MyFare Classic and Ultralight card formats, allowing them to clone keys and generate master keys using tools like the Proxmark3 and Flipper Zero. The conversation covers the limitations of Dormakaba's patching efforts, the importance of per-site AES keys, and the value of consulting old patents for protocol documentation.

    Debugging & failure analysisSensors & measurement in products
    8 chapters

  • The Amp Hour · 1h 06m

    An Interview with Joe FitzPatrick

    Joe Fitzpatrick of SecurityHardware.com, a former CPU silicon security tester, explains how hardware vulnerabilities arise from Verilog assumptions and undocumented register behaviors, leading to his current focus on hardware security training. He details the evolution of attacks from simple JTAG access to sophisticated USB-C exploits involving microcontrollers in adapters, and discusses the NSA Playset's Slot Screamer device. Fitzpatrick argues that physical access often bypasses software security, highlighting the risks of unverified hardware like YubiKey clones and the ethical dilemmas of vulnerability disclosure in IoT and medical devices.

    Security & privacyEmbedded firmware
    8 chapters

  • Oxide and Friends · 1h 21m

    Another LPC55 ROM Vulnerability

    Laura Abbott, a security engineer at Oxide Computer Company, details the discovery of a second vulnerability in the NXP LPC55S69 microcontroller's ROM, which serves as Oxide's hardware root of trust. She explains how reverse engineering the undocumented ROM using Ghidra revealed a buffer overflow in the signed update parser that allowed extraction of device secrets before the system locked down. The episode covers the initial disclosure process, NXP's eventual receptiveness, and the broader industry challenges regarding transparency, CVEs, and the difficulty of securing general-purpose microcontrollers.

    Debugging & failure analysisSecurity & privacy
    13 chapters

  • Unnamed Reverse Engineering Podcast · 1h 14m

    028 - Everyone Has a Bag of Tricks

    Johnny Xmas (@J0hnnyXm4s), a security architect and reverse engineer, discusses his career path from pharmacy to infosec and details the community effort to reverse engineer TSA master keys. He explains how the keys were leaked via a vendor catalog and Instagram, and how the community used 3D printing and lock disassembly to create working copies, highlighting the security implications for luggage and encryption. Xmas also describes his work at Kasada, a company that defends web infrastructure against automated abuse by detecting client-side automation rather than relying on traditional Web Application Firewalls (WAFs).

    Debugging & failure analysisSecurity & privacy
    9 chapters

  • Unnamed Reverse Engineering Podcast · 1h 28m

    058 - Technically Met the Specs

    Eric Schlaepfer and Windell Oskay discuss their book 'Open Circuits,' detailing the process of cutting components in half with sandpaper and grinding wheels to reveal internal structures, while Jacob Creedon, Spencer Moss, Ken, and Will McGuiness share their perspectives on reverse engineering tools like IDA Pro and Ghidra, and the legal and social implications of technology. The group debates the future of AI, the validity of NFTs, and the importance of right-to-repair legislation, with Spencer Moss from Google and Ken from Somerset Recon highlighting the increasing complexity of hardware security. Mike Ryan from Ice 9 Consulting joins to discuss Bluetooth security, the obsolescence of passwords, and the dual-use nature of technology in the context of government regulation.

    Debugging & failure analysisSecurity & privacy
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.