Hardware Podcasts

Offensive Cybersecurity with Ryan Torvik

The Pragmatic Embedded Podcast · 9 Apr 2025 · 48m

What this episode covers

Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Tulip Tree Technology
Products
Microcorruption
Tools
IDA Pro, Binary Ninja, Ghidra, QEMU
Also
National Vulnerability Database, Rust

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 55m

    042 - Diwali in the Morning

    Asmita Jha, an IoT security consultant at Payatu, discusses her transition from embedded firmware development to hardware security and reverse engineering. She details her workflow for analyzing IoT devices like routers and cameras, covering techniques for extracting firmware, decrypting images, and using tools like Ghidra, Binwalk, and QEMU. Jha also shares advice on secure firmware development, emphasizing the importance of avoiding hardcoded credentials and implementing proper secure boot mechanisms.

    Embedded firmwareEDA & CAD tools
    7 chapters

  • Embedded.fm · 56m

    256: Agglomeration

    Chris White and Elecia White discuss the ST Micro F1 series, comparing the use of HAL, Cube, and bare metal programming for embedded systems. They review the Hippocratic Oath for Connected Medical Devices from IAmTheCalvary.org and Make Magazine's tips for securing DIY IoT projects. The hosts also explore the Rockstar Programming Language specification, C++ expressiveness, and Elecia's recent work with Python and JSON.

    Microcontrollers & dev platformsSecurity & privacy
    7 chapters

  • Embedded.fm · 57m

    342: That Girl's Brain

    Jessie Frazelle, Co-Founder and Chief Product Officer at Oxide Computer, explains how the company builds open-source, rack-scale servers for enterprises by adopting hyperscaler-style hardware design. She details the decision to open-source firmware and hardware to eliminate vendor finger-pointing and security vulnerabilities inherent in proprietary BMCs. The discussion covers their use of Rust for firmware and control plane software, power efficiency metrics like PUE, and the challenges of deploying high-density compute in traditional colocation environments.

    Embedded firmwareSecurity & privacy
    7 chapters

  • IoT For All Podcast · 59m

    How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027

    Terry Dunlap, Co-Founder & CEO of ReFirm Labs, explains how his background in offensive cyber operations at the NSA led to the creation of a platform for proactive IoT firmware security. He details the discovery of hard-coded credentials in IoT devices that enabled the Mirai botnet and discusses how low-cost manufacturers often ignore security until faced with legal liability. Dunlap highlights ReFirm Labs' work with telecom providers like AT&T and Charter to vet firmware before deployment, and explores emerging markets like cyber insurance and automotive security, including a demonstration of vulnerabilities in an OBD-II dongle.

    Security & privacyEmbedded firmware
    10 chapters

  • IoT For All Podcast · 18m

    Biggest Firmware Vulnerabilities & How to Fix Them | NetRise's Thomas Pace | Internet of Things Podcast

    Thomas Pace, co-founder and CEO of NetRise, explains how automated firmware analysis provides visibility into extended IoT (XIOT) devices, including industrial control systems and medical devices. He details the process of extracting firmware from embedded Linux and RTOS environments to identify vulnerabilities, weak credentials, and exposed keys. Pace emphasizes the critical importance of generating a Software Bill of Materials (SBOM) to enable vulnerability correlation and risk prioritization for both device manufacturers and enterprise customers.

    Embedded firmwareSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Pragmatic Embedded Podcast. The episode itself belongs to its publisher.