The Tale of Reverso

Oxide and Friends · 16 May 2026 · 1h 06m · Episode 11

What this episode covers

Robert "RFK" Keith, Adam Suczewski, and Matt Keeter of Oxide Computer Company explain the development of Reverso, a simple passive test fixture designed to validate cable backplane integrity during high-volume manufacturing. The team discovered that Reverso triggered transient TCP disconnects in the RackTest software due to a bug in the VSC7448 management switch's MAC address table handling. The root cause was the switch's default behavior of not using VLAN tags for MAC table associations, causing it to misdirect packets when the same MAC address appeared on multiple ports via the loopback. The fix involved enabling a configuration bit to make the MAC table VLAN-aware, resolving the issue and enabling Oxide to scale production.

Mentioned

Companies
Oxide Computer Company
Products
Reverso, RackTest, Dendrite
Chips
VSC7448, Tofino
Also
Hubris, Illumos

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 01m

    055 - Stacks Of Bricked Chips

    Laura Abbott, a software developer at Oxide Computer, explains how her team reverse engineered the NXP LPC55S69 microcontroller to build a root of trust for their servers. She details discovering an undocumented ROM patching hardware block that allowed privilege escalation, leading to a CVE and a DEF CON presentation. Abbott also discusses her background in Linux kernel development, the transition to Rust for microcontrollers, and the challenges of working with contradictory chip documentation.

  • The Amp Hour · 57m

    Finding Hardware Flaws with Laura Abbott

    Laura Abbott, an engineer at Oxide Computer, discusses her accidental discovery of a buffer overflow vulnerability in the ROM update mechanism of the NXP LPC55S69 microcontroller while working on Oxide's server root of trust. She explains how Oxide is rebuilding the server from the ground up with a focus on hardware security, utilizing their open-source operating system Hubris and the Rust programming language to mitigate risks like memory safety issues. The conversation covers the architecture of the server's secure components, including the service processor and TrustZone-M, as well as the challenges of remote hardware debugging and contributing to the Linux kernel community.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Oxide and Friends. The episode itself belongs to its publisher.