524: This Isn't a Movie

Embedded.fm · 16 Apr 2026 · 1h 14m · Episode 524

What this episode covers

Nathan Jones, a former US Army instructor and current embedded systems educator writing for DigiKey and EmbeddedRelated, discusses the trade-offs between superloops and RTOSs, arguing that superloops avoid the race conditions inherent in pre-emptive scheduling. He details his work on hardware security, explaining how differential power analysis can extract AES keys using the ChipWhisperer tool, and highlights the impact of the EU Cyber Resilience Act on product design. The conversation also covers his upcoming workshops at the Embedded Online Conference and CppCon, as well as his reflections on writing, teaching, and managing the mental load of consultancy.

Mentioned

Companies
DigiKey, EmbeddedRelated, NewAE Tech, MITRE
Products
FreeRTOS, ThreadX, Zephyr, ChipWhisperer-Nano, The Hardware Hacking Handbook, Pragmatic Programmer
Tools
ChipWhisperer, ChatGPT, Claude, Wireshark
Also
Colin O'Flynn, Jasper van Woudenberg, Embedded Online Conference, CppCon, Hardwear.io, West Point

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 15m

    038 - My Favorite Random Number is 5

    Colin O'Flynn, founder of NewAE Technology, explains how differential power analysis (DPA) and fault injection allow attackers to recover cryptographic keys from embedded devices by measuring minute power variations or disrupting clock/voltage signals. He details the mechanics of side-channel attacks, the importance of random number generation, and the limitations of 'military grade' encryption claims. O'Flynn also discusses his open-source tool ChipWhisperer, electromagnetic fault injection hardware like BADFET, and the broader industry challenges in securing IoT devices against such physical attacks.

  • The Amp Hour · 1h 08m

    An Interview with Colin O'Flynn - Aspirated Adamantine Attacks

    Colin O'Flynn, creator of the ChipWhisperer project and a PhD student at Dalhousie University, explains how side-channel attacks like differential power analysis (DPA) can break AES-256 encryption on embedded devices by measuring tiny power fluctuations. He discusses the hardware design of the ChipWhisperer, including its high-speed ADC and FPGA, and contrasts the open-source ChipWhisperer Lite with the more feature-rich original version. O'Flynn also details his manufacturing decisions, explaining why he chose local Canadian fabrication over China to avoid component substitution issues and ensure quality for this niche, high-precision tool.

  • The Pragmatic Embedded Podcast · 56m

    Modern Embedded Systems Programming with Miro Samek

    Miro Samek, founder and CEO of Quantum Leaps, explains why traditional embedded architectures like superloops and RTOS lead to 'spaghetti code' and concurrency bugs, advocating instead for event-driven active objects and hierarchical state machines. He details how this approach eliminates race conditions and mutexes by enforcing a 'no sharing' principle, thereby improving testability and development velocity. Samek also discusses the importance of using lightweight modeling tools to generate code from state diagrams, ensuring the model remains the source of truth in an agile workflow.

  • Hackaday Podcast · 1h 10m

    Ep 387: Superhuman Clocks, CAN in USB-C, and the Joys of Bare Metal

    Hackaday editors Elliot Williams and Tom Nardi discuss recent community hacks, including Mikey Sklar's work to bring MicroPython's Viper and empy cross speedups to CircuitPython, and Bas Bottberg's reverse engineering of a Bluetooth printer using bleak. They also cover Ben's complete firmware rewrite of an E-grooter in Rust, which involved discovering CAN bus over USB-C, and Egg Karate Singh's complex mechanical clocks like Ovodio. The episode concludes with Hackaday Europe talks: Sylvain's bare metal 'Minimacy' virtual machine for security-critical applications, and Janelle Wellen's presentation on space mission hacks and troubleshooting.

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.