Hardware Podcasts

An Interview with Joe FitzPatrick

The Amp Hour · 5 Jun 2017 · 1h 06m · Episode 346

What this episode covers

Joe Fitzpatrick of SecurityHardware.com, a former CPU silicon security tester, explains how hardware vulnerabilities arise from Verilog assumptions and undocumented register behaviors, leading to his current focus on hardware security training. He details the evolution of attacks from simple JTAG access to sophisticated USB-C exploits involving microcontrollers in adapters, and discusses the NSA Playset's Slot Screamer device. Fitzpatrick argues that physical access often bypasses software security, highlighting the risks of unverified hardware like YubiKey clones and the ethical dilemmas of vulnerability disclosure in IoT and medical devices.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
SecurityHardware.com
Products
NSA Playset, Slot Screamer, YubiKey
Also
USB-C, JTAG, Verilog

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 45m

    019 - It's Still Not Magic

    Holly Graceful, a penetration tester at Graceful Security, discusses her hardware reverse engineering blog series and her career transition from the military to private sector security. She explains that debug interfaces like JTAG are often left accessible in consumer products due to manufacturing cost and testing requirements rather than security negligence. Graceful details her approach to demystifying hardware hacking by breaking complex topics into bite-sized tutorials, covering tools like the JTAGulator, USRP, and logic analyzers. She emphasizes that hardware access is often a vector for broader network attacks, not just compromising the device itself.

    Debugging & failure analysisSecurity & privacy
    10 chapters

  • Embedded.fm · 1h 05m

    431: Becoming More of a Smurf

    Jasper van Woudenberg, CTO of Riscure North America and co-author of the Hardware Hacking Handbook with Colin O'Flynn, discusses the seven-year process of writing the book and the evolving landscape of hardware security. He explains how vulnerabilities like Spectre and Meltdown emerged during the writing process, forcing multiple rewrites, and details the shift from red-team hacking to blue-team defense, or 'becoming a Smurf.' The conversation covers specific attack vectors including side-channel analysis, fault injection, and remote exploitation via ADCs, as well as the ethical implications of publishing hardware vulnerabilities.

    Security & privacyChips, FPGAs & semiconductors
    10 chapters

  • Unnamed Reverse Engineering Podcast · 1h 38m

    025 - Opaque Magisterium

    Kate Temkin and Mikaela Szekely from Great Scott Gadgets discuss the challenges and tools of USB reverse engineering. They detail the creation of open-source hardware like the GreatFET and Rhododendron, as well as software tools like USBProxy and the new USB analyzer framework called USB. The conversation covers specific vulnerabilities, such as the Nintendo Switch stack smash, and the difficulties of high-speed signal analysis compared to low-cost logic analyzers.

    Debugging & failure analysisTest & measurement
    7 chapters

  • Embedded.fm · 1h 06m

    519: The Password Is All Zeros

    Mark Omo and James Rowley from Marcus Engineering discuss their research into SECURAM safe locks, revealing that the ProLogic series contains critical security flaws, including a debug port password set to all zeros and codes stored on the external keypad. They detail two exploits, 'code snatch' and 'reset heist,' which allow unauthorized access to safes used for pharmaceuticals and cash, despite UL high-security certification. The conversation covers the ethical and legal challenges of responsible disclosure, including threats from SECURAM's legal team and support from the EFF's Coders' Rights Project.

    Security & privacyDebugging & failure analysis
    8 chapters

  • Moore's Lobby · 1h 01m

    Ep. 28 | How DARPA Stops IC Hardware Hackers in Their Tracks: Insights from Serge Leef

    Serge Leef, DARPA’s Program Manager for the Microsystems Technology Office, discusses his transition from a 30-year career in design automation at companies like Mentor Graphics and Silicon Graphics to leading hardware security initiatives at DARPA. He outlines DARPA’s four attack surfaces for secure silicon—supply chain, side-channel, reverse engineering, and hardware Trojans—and explains the agency's strategy of embedding security into design tools, likening it to fluoridating water. Leef highlights the economic realities of hardware security, noting that while merchant semiconductor companies invest heavily in bespoke protection, IoT manufacturers often ignore it until forced by crisis, and emphasizes the critical vulnerability of untrusted third-party IP.

    Security & privacyEDA & CAD tools
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.