Ep 311: AirTag Hack, GPS Rollover, and a Flat-Pack Toaster

Hackaday Podcast · 7 Mar 2025 · 1h 04m · Episode 311

What this episode covers

Hosts Elliot Williams and Tom Nardi discuss David Cuartielles, co-founder of Arduino, who will keynote Hackaday Europe on compostable electronics. They analyze a research paper on hijacking Apple AirTag infrastructure by exploiting weak Bluetooth Low Energy address randomization, and detail how a flat-pack toaster by Casey Ho prioritizes repairability and user assembly over aesthetics. The episode also covers a GPS week-number rollover workaround using an RP2040, a fiber-optic display mapped via computer vision, and a review of hardware presence at FOSDEM 2025.

Mentioned

Companies
Arduino
Products
Apple AirTag, Open Haystack, Symmetricom SyncServer S200
Chips
ESP32, RP2040
Tools
Bus Pirate 5
Also
David Cuartielles, FOSDEM

Other shows on the same ground, closest first.

  • 047 - The Sun, The Moon, The Stars

    Jen Castillo and Alvaro Prieto discuss recent reverse engineering projects, including Colin O'Flynn's teardown of the Apple AirTag, which revealed an nRF52 microcontroller and a vulnerability allowing firmware dumping via the Pocket Glitcher. They also cover a method to transmit arbitrary data through Apple's Find My network, a 70% reduction in GTA Online loading times by patching a slow JSON parser, and reverse engineering of Reolink IP cameras and eInk price tags. The hosts highlight past guests' work on the LPC55S69 microcontroller and the Asahi Linux project for the Apple M1 processor, noting a trend toward better security practices in hardware design.

  • Unnamed Reverse Engineering Podcast · 1h 15m

    063 - I Read Online That It's Impossible

    Security researcher Thomas Roth (@stacksmashing) discusses his hardware hacking projects, including dumping the Apple AirTag firmware via fault injection on an NRF52 microcontroller and building the open-source 'Tamarin' cable to enable JTAG debugging on iPhones. He details the complex reverse engineering of the Apple Lightning protocol, the challenges of implementing a custom SWD stack on a Raspberry Pi Pico, and his work enabling multiplayer Tetris on a physical Game Boy using WebUSB. Roth also shares insights on his career, favorite tools like Ghidra and the RP2040, and the accessibility of modern fault injection techniques.

  • The Amp Hour · 1h 14m

    Cassette decks have browsers?

    Dave Jones and Chris Gammell discuss the teardown of the Apple AirTag, analyzing its nRF52832 chip, U1 ultra-wideband transceiver, and asset-tracking architecture. They contrast this with Amazon's Sidewalk IoT network, the challenges of EV vehicle-to-load technology, and the complexities of repairing vintage surround sound receivers. The conversation also covers the acquisition of Supply Frame by Siemens, the lack of standardization in EDA library management, and the controversial acquisition of Audacity by Muse.

  • Unnamed Reverse Engineering Podcast · 1h 28m

    051 - Collecting Students With Similar Names

    Jiska Classen (@naehrdine), a security researcher at the Secure Mobile Networking Lab at TU Darmstadt, discusses her work in reverse engineering wireless hardware, focusing on Broadcom Bluetooth chips and iOS devices. She details the creation of tools like Internal Blue and Frankenstein to patch and emulate Broadcom firmware, and explains how Frida and ToothPicker are used to fuzz and analyze the iOS Bluetooth daemon. The conversation also covers the reverse engineering of AirTags, including custom sound playback and privacy features, and the development of the AirGuard app for Android.

  • Embedded.fm · 57m

    117: In as Much as Which

    Hosts Elecia White and Christopher White discuss listener emails covering Bluetooth 4.2 security, the definition of masked ROM, and the use of the volatile keyword in C. They review Elecia's work on precision mice feeders and bike lights, and detail their disassembly of BB-8 robots for competitive analysis of their BLE and inertial sensors. The episode concludes with commentary on Amazon's work culture and drone regulations.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Hackaday Podcast. The episode itself belongs to its publisher.