The Amp Hour · 7 Oct 2016 · 1h 57m · Episode 318
Michael Ossmann of Great Scott Gadgets and Dmitry Nedospasov of Toothless Consulting discuss hardware security, training, and open-source tooling. They detail the development of the GreatFET platform and the next-generation HackRF 'Marzipan' using the i.MX7 processor, while Nedospasov outlines his FPGA-based protocol analyzer training. The conversation shifts to the ethical and legal complexities of hardware security, specifically the MedSec case involving St. Jude medical devices and the Volkswagen emissions scandal.
companies scaling up
Other shows on the same ground, closest first.
Kate Temkin and Mikaela Szekely from Great Scott Gadgets discuss the challenges and tools of USB reverse engineering. They detail the creation of open-source hardware like the GreatFET and Rhododendron, as well as software tools like USBProxy and the new USB analyzer framework called USB. The conversation covers specific vulnerabilities, such as the Nintendo Switch stack smash, and the difficulties of high-speed signal analysis compared to low-cost logic analyzers.
Eric Schlaepfer and Windell Oskay discuss their book 'Open Circuits,' detailing the process of cutting components in half with sandpaper and grinding wheels to reveal internal structures, while Jacob Creedon, Spencer Moss, Ken, and Will McGuiness share their perspectives on reverse engineering tools like IDA Pro and Ghidra, and the legal and social implications of technology. The group debates the future of AI, the validity of NFTs, and the importance of right-to-repair legislation, with Spencer Moss from Google and Ken from Somerset Recon highlighting the increasing complexity of hardware security. Mike Ryan from Ice 9 Consulting joins to discuss Bluetooth security, the obsolescence of passwords, and the dual-use nature of technology in the context of government regulation.
Michael Ossmann, founder and CTO of Great Scott Gadgets, discusses the creation of open-source hardware tools like HackRF One and Ubertooth One, which emerged from his background in wireless security research. He explains how his work on public safety protocols like APCO P25 and the NSA's ANT catalog led to the development of accessible RF tools and a passion for education through his SDR video series. Ossmann also shares anecdotes about unexpected uses of his hardware, such as studying shark behavior, and the importance of open-source software like GNU Radio Companion in lowering the barrier to entry for digital signal processing.
Hosts Elecia White and Chris Svec discuss a variety of embedded systems topics, including the use of the RTL-SDR dongle for software-defined radio and the challenges of low-quality Chinese Ham radios. They analyze the industry's need to 'grow up' regarding security and ethics, citing the ESA Schiaparelli lander failure as an example of integration testing gaps. The conversation also covers the utility of Compiler Explorer (Godbolt.org) for comparing assembly output and addresses the prevalence of imposter syndrome among engineers.
Jen and Alvaro interview Sarah Petkus and Mark Koch, who discuss reverse engineering at the Blue Man Group and their projects like the Shibon suit and Solstice board. Rick Altherr details his work reverse engineering Xilinx FPGA bitstreams and automotive engine control protocols using tools like Hex Fiend. Ruth Grace Wong and Joe Rozner share experiences with firmware debugging and prototype failures, while Piotr Esden and Dominc Spill discuss the Black Magic Probe and HackRF One for wireless reverse engineering.
The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.