Hardware Podcasts

019 - It's Still Not Magic

Unnamed Reverse Engineering Podcast · 6 Apr 2019 · 45m

What this episode covers

Holly Graceful, a penetration tester at Graceful Security, discusses her hardware reverse engineering blog series and her career transition from the military to private sector security. She explains that debug interfaces like JTAG are often left accessible in consumer products due to manufacturing cost and testing requirements rather than security negligence. Graceful details her approach to demystifying hardware hacking by breaking complex topics into bite-sized tutorials, covering tools like the JTAGulator, USRP, and logic analyzers. She emphasizes that hardware access is often a vector for broader network attacks, not just compromising the device itself.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Graceful Security, Great Scott Gadgets
Tools
JTAGulator, USRP, PulseView, GNU Radio, Black Magic Probe, CortexProg, Segger Jlink
Also
Arduino

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 06m

    An Interview with Joe FitzPatrick

    Joe Fitzpatrick of SecurityHardware.com, a former CPU silicon security tester, explains how hardware vulnerabilities arise from Verilog assumptions and undocumented register behaviors, leading to his current focus on hardware security training. He details the evolution of attacks from simple JTAG access to sophisticated USB-C exploits involving microcontrollers in adapters, and discusses the NSA Playset's Slot Screamer device. Fitzpatrick argues that physical access often bypasses software security, highlighting the risks of unverified hardware like YubiKey clones and the ethical dilemmas of vulnerability disclosure in IoT and medical devices.

    Security & privacyEmbedded firmware
    8 chapters

  • The Spark Gap · 48m

    The Spark Gap - Episode 9

    Hosts Carl and Corey discuss the industry practice of manufacturers like Tektronix and Agilent disabling hardware features via software locks, arguing that unlocking them is not theft because the hardware already exists. They contrast Tektronix's aggressive legal stance with Rigel's acceptance of firmware hacks, which helped the company gain market share among hobbyists. The hosts recommend open-source alternatives like the Bus Pirate and Logic Sniffer, as well as commercial tools from Saleae and Total Phase, as cost-effective substitutes for expensive scope add-ons.

    Debugging & failure analysisPricing, margins & unit economics
    6 chapters

  • Embedded.fm · 1h 10m

    58: Use These Powers For Good

    Joe Grand, founder of Grand Idea Studio and former member of the hacker group LOIC, discusses his career in hardware hacking, his role as a judge for the Hackaday Prize, and his work teaching cybersecurity to high school students. He details his experience testifying before the U.S. Senate, his TV show Prototype This, and his advice for embedded engineers to adopt a 'hacker mindset' to improve security. Grand also critiques the privacy implications of wearables and the Internet of Things, emphasizing the need for responsible use of technical skills.

    Security & privacyDebugging & failure analysis
    8 chapters

  • Embedded.fm · 50m

    111: Potty Train Your Tamagotchi

    Natalie Silvanovich, a security engineer at Google's Project Zero, discusses her reverse engineering of Tamagotchi devices, ranging from early 6502-based models to modern NFC-enabled versions. She details how she bypassed General Plus mask ROM limitations using a vulnerability in programmable figure accessories to dump code and create a Tamagotchi development kit. Silvanovich also explains her 'Hardware Excuse Generator' tool and her work on Flash exploits, highlighting the contrast between high-end mobile security and low-end hardware constraints.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

    Debugging & failure analysisSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.