Hardware Podcasts

Hardware Security with Matt Brown

The Amp Hour · 17 Jul 2025 · 1h 07m · Episode 698

What this episode covers

Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

Most relevant to

makers and hobbyists

Topics

Mentioned

Companies
Home Depot, AWS, Samsung, Bosch
Chips
ESP32, ATECC608
Tools
Wireshark, Ghidra, IDA Pro, XGecu T76, Pico EMP, Saleae Logic Analyzer, USRP B200, GNU Radio, Universal Radio Hacker, NRF Connect, Binwalk
Also
DEF CON, Hardware IO

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 55m

    042 - Diwali in the Morning

    Asmita Jha, an IoT security consultant at Payatu, discusses her transition from embedded firmware development to hardware security and reverse engineering. She details her workflow for analyzing IoT devices like routers and cameras, covering techniques for extracting firmware, decrypting images, and using tools like Ghidra, Binwalk, and QEMU. Jha also shares advice on secure firmware development, emphasizing the importance of avoiding hardcoded credentials and implementing proper secure boot mechanisms.

    Embedded firmwareEDA & CAD tools
    7 chapters

  • Unnamed Reverse Engineering Podcast · 1h 28m

    058 - Technically Met the Specs

    Eric Schlaepfer and Windell Oskay discuss their book 'Open Circuits,' detailing the process of cutting components in half with sandpaper and grinding wheels to reveal internal structures, while Jacob Creedon, Spencer Moss, Ken, and Will McGuiness share their perspectives on reverse engineering tools like IDA Pro and Ghidra, and the legal and social implications of technology. The group debates the future of AI, the validity of NFTs, and the importance of right-to-repair legislation, with Spencer Moss from Google and Ken from Somerset Recon highlighting the increasing complexity of hardware security. Mike Ryan from Ice 9 Consulting joins to discuss Bluetooth security, the obsolescence of passwords, and the dual-use nature of technology in the context of government regulation.

    Debugging & failure analysisSecurity & privacy
    7 chapters

  • Unnamed Reverse Engineering Podcast · 1h 31m

    071 - Snerd Niped

    Thomas Roth (Stacksmashing) discusses his recent hardware reverse engineering projects, including bypassing the lock on iPhone 15 and MacBook M3 chips using the Ace 3 controller and tools like the Central Scrutinizer and Tamarin-C. He also details a low-cost BitLocker key sniffer built with a Raspberry Pi Pico and his work with HexTree.io on the RP2350 Hacking Challenge and the Faultier glitching tool. Roth emphasizes the importance of accessible, open-source hardware security tools for education and community learning.

    Debugging & failure analysisMicrocontrollers & dev platforms
    6 chapters

  • Unnamed Reverse Engineering Podcast · 50m

    047 - The Sun, The Moon, The Stars

    Jen Castillo and Alvaro Prieto discuss recent reverse engineering projects, including Colin O'Flynn's teardown of the Apple AirTag, which revealed an nRF52 microcontroller and a vulnerability allowing firmware dumping via the Pocket Glitcher. They also cover a method to transmit arbitrary data through Apple's Find My network, a 70% reduction in GTA Online loading times by patching a slow JSON parser, and reverse engineering of Reolink IP cameras and eInk price tags. The hosts highlight past guests' work on the LPC55S69 microcontroller and the Asahi Linux project for the Apple M1 processor, noting a trend toward better security practices in hardware design.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • Unnamed Reverse Engineering Podcast · 1h 03m

    065 - Multitalented Grinch

    Hosts Alvaro Brieto and Jen discuss their recent attendance at Open Sauce and the Crowd Supply teardown conference, highlighting the community aspect of hardware reverse engineering. They review several books on security and hacking history, including 'ARM Assembly and Reverse Engineering' and 'Murdoch's Pirates', while also sharing news about past guests like David from Cyber City Circuits teaching the First Lady to solder. The episode concludes with technical discussions on CAN bus vulnerabilities in Toyota vehicles, hotel IoT security, and Alvaro's new DJI Mic recording setup for upcoming coverage at CCCamp.

    Security & privacyMaker community & events
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.