Hardware Podcasts

#397.6 - An Interview with Matt Knight

The Amp Hour · 24 Jun 2018 · 28m

What this episode covers

Matt Knight, an electrical engineer and security researcher, discusses his work at ToorCamp on using Software Defined Radios (SDRs) to reverse-engineer and fuzz RF protocols. He details his research into LoRa physical layer modulation, specifically chirp spread spectrum, and the security implications of LoRaWAN. Knight also introduces TumbleRF, an open-source fuzzing framework he developed with Ryan Spears to automate the discovery of vulnerabilities in wireless devices, and his custom hardware project, Orthris, designed to overcome USB latency limitations in RF testing.

Most relevant to

makers and hobbyists

Topics

Mentioned

Companies
The Things Network
Products
LoRa, LoRaWAN, HackRF, RTL-SDR, TumbleRF, Orthris, BladeRF, USRP
Also
ToorCamp, DEF CON, Black Hat

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 02m

    059 - Instant Nerd Snipe

    Mike Ryan, founder of Ice9 Consulting and a Bluetooth security expert, joins the hosts to discuss reverse engineering RF protocols and the state of software-defined radio (SDR) tools. He details his methodology for analyzing custom RF signals using tools like Inspectrum and Baudline, explains how to identify modulation types like OOK and FSK, and shares insights on hardware choices like the HackRF and Ubertooth. Ryan also discusses his upcoming open-source Bluetooth sniffer for SDRs, the challenges of virtualization on M1 Macs, and the importance of using standard protocols like BLE over custom RF for security.

    Wireless & RFDebugging & failure analysis
    6 chapters

  • Unnamed Reverse Engineering Podcast · 1h 37m

    057 - I Did Not Expect Sharks!

    Michael Ossmann, founder and CTO of Great Scott Gadgets, discusses the creation of open-source hardware tools like HackRF One and Ubertooth One, which emerged from his background in wireless security research. He explains how his work on public safety protocols like APCO P25 and the NSA's ANT catalog led to the development of accessible RF tools and a passion for education through his SDR video series. Ossmann also shares anecdotes about unexpected uses of his hardware, such as studying shark behavior, and the importance of open-source software like GNU Radio Companion in lowering the barrier to entry for digital signal processing.

    Open-source hardwareWireless & RF
    8 chapters

  • Unnamed Reverse Engineering Podcast · 1h 06m

    012 - Cheese vs. SDR

    Jared Boone, founder of Sharebrained Technology, discusses the HackRF software-defined radio and the Portapack, a portable handheld device he developed to make SDR accessible without a laptop. Alvaro, who runs a cheese project called Ostur, joins the conversation to discuss embedded development using STM32 and Nordic nRF52 platforms, while also sharing his passion for cheesemaking. The group explores the history of interactive TV, Blu-ray authoring, and the technical details of various radio technologies, including Iridium satellite interception and TPMS signal analysis.

    Wireless & RFEmbedded firmware
    10 chapters

  • Unnamed Reverse Engineering Podcast · 1h 40m

    053 - It's Hammer Time!

    Hash, a reverse engineer known for smart meter hacking, discusses his journey from self-taught electronics hobbyist to analyzing critical infrastructure. He details his reverse engineering of the Neato XV-11 robot vacuum's LIDAR to win a bounty, and his current work using Software Defined Radios (SDRs) like the HackRF and Yardstick One to analyze Landis+Gyr smart meters. Hash explains how he bypassed frequency hopping by transmitting on all channels simultaneously and highlights the security risks of these devices, including data leakage from decommissioned hardware found on eBay.

    Wireless & RFDebugging & failure analysis
    8 chapters

  • Unnamed Reverse Engineering Podcast · 1h 22m

    013 - It's Not Magic

    Schneider, a key member of the rad1o Badge project team, explains the reverse engineering of the Iridium satellite network, detailing how they decoded pager and voice protocols using SDR tools like HackRF and gr-iridium. He discusses the technical challenges of identifying BCH error correction and interleaving, and the community-driven development of tools like Inspectrum and Phosphor. Schneider also highlights the privacy implications of unencrypted commercial traffic, including sensitive medical dispatches, and the ongoing work to monitor the new Iridium NEXT constellation.

    Wireless & RFEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.