Hardware Podcasts

007 - Candy Coated

Unnamed Reverse Engineering Podcast · 3 Jan 2018 · 46m

What this episode covers

M. Carlton, VP of Research at Senrio, discusses her team's discovery of 'Devil's Ivy,' a critical stack buffer overflow vulnerability in the GSOAP library used by Axis Communications and other IoT device manufacturers. She details the reverse engineering process for the Axis M300 camera, the tools used (IDA Pro, Binwalk), and the rapid patching response by Axis. The conversation also covers Senrio's transition from security consulting to a network visibility product, advice for securing IoT devices, and the career paths of reverse engineers.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Senrio, Axis Communications
Products
Axis M300
Tools
GSOAP, IDA Pro, Binwalk, GDB

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 02m

    312: Two Meter Exhaust Port

    Hosts Elecia White and Christopher White discuss how security vulnerabilities are exploited in embedded systems, using a fictional VoIP speaker phone as a case study for threat modeling. They explain the mechanics of buffer overflow attacks, detailing how stack corruption allows attackers to execute arbitrary code, and cover injection prevention and the risks of insecure firmware update mechanisms. The conversation emphasizes the importance of OWASP Embedded Application Best Practices, securing sensitive data, and conducting threat modeling to balance security with manufacturing constraints.

    Security & privacyEmbedded firmware
    8 chapters

  • IoT For All Podcast · 59m

    How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027

    Terry Dunlap, Co-Founder & CEO of ReFirm Labs, explains how his background in offensive cyber operations at the NSA led to the creation of a platform for proactive IoT firmware security. He details the discovery of hard-coded credentials in IoT devices that enabled the Mirai botnet and discusses how low-cost manufacturers often ignore security until faced with legal liability. Dunlap highlights ReFirm Labs' work with telecom providers like AT&T and Charter to vet firmware before deployment, and explores emerging markets like cyber insurance and automotive security, including a demonstration of vulnerabilities in an OBD-II dongle.

    Security & privacyEmbedded firmware
    10 chapters

  • IoT For All Podcast · 44m

    Breaking Embedded IoT Systems | Ken Munro, Partner at Pen Test Partners | #IoTMakers E036

    Ken Munro, Partner at Pen Test Partners, explains how his team conducts 'vanilla research' by purchasing and breaking embedded IoT devices to find security vulnerabilities, such as the My Friend Kayla doll and smart heated drinks cups. He argues that security is often treated as an afterthought by startups, leading to catastrophic failures when wrong chipsets are chosen early in development, making over-the-air updates impossible. Munro details the responsible disclosure process, noting that when vendors ignore or stonewall reports, companies often go out of business, and he advocates for government regulation like California's SB 327 to enforce reasonable security controls.

    Security & privacyStarting a product company
    8 chapters

  • Embedded.fm · 1h 13m

    192: Button Connected To Nothing

    Terry Dunlap, founder and CEO of Tactical Network Solutions, discusses the critical lack of security in Internet of Things (IoT) devices, citing the Mirai botnet, the TrendNet FTC lawsuit, and the St. Jude Medical defibrillator alert as key examples of failure. He explains that common vulnerabilities stem from insecure coding practices, such as buffer overflows and hardcoded keys, often exacerbated by outsourcing firmware development without source code visibility. Dunlap highlights the emergence of standards like UL 2900 and the work of organizations like CableLabs to enforce firmware evaluation, while noting that consumers often remain vulnerable due to poor router configurations and a lack of firmware update support. He advises manufacturers to implement secure coding practices, use source code auditing tools, and encrypt firmware images to reduce the attack surface before devices reach the field.

    Security & privacyEmbedded firmware
    11 chapters

  • IoT For All Podcast · 18m

    Biggest Firmware Vulnerabilities & How to Fix Them | NetRise's Thomas Pace | Internet of Things Podcast

    Thomas Pace, co-founder and CEO of NetRise, explains how automated firmware analysis provides visibility into extended IoT (XIOT) devices, including industrial control systems and medical devices. He details the process of extracting firmware from embedded Linux and RTOS environments to identify vulnerabilities, weak credentials, and exposed keys. Pace emphasizes the critical importance of generating a Software Bill of Materials (SBOM) to enable vulnerability correlation and risk prioritization for both device manufacturers and enterprise customers.

    Embedded firmwareSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.