# #397.6 - An Interview with Matt Knight

- Show: [The Amp Hour](https://hardwarepodcasts.com/podcast/the-amp-hour)
- Published: 2018-06-24
- Length: 28m
- Page: https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight
- Listen: https://theamphour.com/397-6-an-interview-with-matt-knight/

## Summary

Matt Knight, an electrical engineer and security researcher, discusses his work at ToorCamp on using Software Defined Radios (SDRs) to reverse-engineer and fuzz RF protocols. He details his research into LoRa physical layer modulation, specifically chirp spread spectrum, and the security implications of LoRaWAN. Knight also introduces TumbleRF, an open-source fuzzing framework he developed with Ryan Spears to automate the discovery of vulnerabilities in wireless devices, and his custom hardware project, Orthris, designed to overcome USB latency limitations in RF testing.

## Chapters

- [0:00](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=0) Introduction and ToorCamp Context
- [2:27](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=147) LoRa Physical Layer and Chirp Spread Spectrum
- [7:14](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=434) LoRaWAN Security and Geolocation Risks
- [10:15](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=615) The Role of SDRs in Wireless Security Research
- [15:50](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=950) TumbleRF: An Open-Source RF Fuzzing Framework
- [20:26](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight#t=1226) Orthris: Hardware for Low-Latency RF Fuzzing

## Topics

- [Wireless & RF](https://hardwarepodcasts.com/topic/wireless-and-rf)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)

## Most relevant to

makers and hobbyists

## Mentioned

- ToorCamp (other)
- LoRa (product)
- LoRaWAN (product)
- The Things Network (company)
- HackRF (product)
- RTL-SDR (product)
- TumbleRF (product)
- Orthris (product)
- BladeRF (product)
- USRP (product)
- DEF CON (other)
- Black Hat (other)

## Related episodes from other shows

- [059 - Instant Nerd Snipe](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-07-04-059-instant-nerd-snipe) (Unnamed Reverse Engineering Podcast)
- [057 - I Did Not Expect Sharks!](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-05-09-057-i-did-not-expect-sharks) (Unnamed Reverse Engineering Podcast)
- [012 - Cheese vs. SDR](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2018-06-29-012-cheese-vs-sdr) (Unnamed Reverse Engineering Podcast)
- [053 - It's Hammer Time!](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-12-16-053-its-hammer-time) (Unnamed Reverse Engineering Podcast)
- [013 - It's Not Magic](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2018-07-04-013-its-not-magic) (Unnamed Reverse Engineering Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-24-397-6-an-interview-with-matt-knight. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to The Amp Hour.