023 - Magic Moonbeams

Unnamed Reverse Engineering Podcast · 8 Jul 2019 · 32m

What this episode covers

Adam Laurie, known as Major Malfunction, discusses his history with magnetic stripe technology, starting with his 'Magstripe Madness' talk at Defcon 14 and his use of Magnasee liquid to visualize data. He explains how he built early readers using sound cards and F2F encoding, and details his work at the Hardpwn contest where he analyzed Square payment terminals using the Proxmark 3. Laurie also highlights various open-source tools he has developed or uses, including RFIDler, Scapy, KillerBee, and Universal Radio Hacker, to decode and manipulate RF signals.

Mentioned

Companies
Square
Products
RFIDler
Tools
Proxmark 3, Scapy, KillerBee, Universal Radio Hacker, HackRF, Fun Cube
Also
Iceman, Adam Laurie

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 23m

    An Interview with Samy Kamkar

    Samy Kamkar, an independent security researcher, discusses his journey from hacking Counter-Strike and MySpace to creating hardware exploits like Roll Jam and MagSpoof. He details how he used off-the-shelf components like the Raspberry Pi, Teensy, and TI CC1101 to demonstrate vulnerabilities in drones, car key fobs, and credit card systems. Kamkar emphasizes the importance of open-source hardware and low-cost tools like the Yardstick One and Proxmark in making security research accessible, while highlighting the growing security risks of IoT devices.

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

  • The Amp Hour · 28m

    #397.6 - An Interview with Matt Knight

    Matt Knight, an electrical engineer and security researcher, discusses his work at ToorCamp on using Software Defined Radios (SDRs) to reverse-engineer and fuzz RF protocols. He details his research into LoRa physical layer modulation, specifically chirp spread spectrum, and the security implications of LoRaWAN. Knight also introduces TumbleRF, an open-source fuzzing framework he developed with Ryan Spears to automate the discovery of vulnerabilities in wireless devices, and his custom hardware project, Orthris, designed to overcome USB latency limitations in RF testing.

  • Hackaday Podcast · 48m

    Ep003: Igloos, Lidar, and the Blinking LED of RF Hacking

    Hackaday editors Mike and Elliot Williams discuss a range of hardware hacks, including Elliot’s construction of a 7-foot igloo and Brian Benchoff’s color art using an Image Writer 2 matrix printer. They explore low-cost LIDAR modules and passive RFID sensor research by Brian McAvoy, which involves cutting tag antennas to add sensors. The conversation also covers RF hacking of 433 MHz devices using RTLSDR and cheap transceivers, alongside software tools like SOX and FFmpeg for audio processing.

  • The Amp Hour · 1h 43m

    Conning with Michael Ossmann

    Michael Ossmann of Great Scott Gadgets discusses the HackRF software defined radio, his company's open source hardware philosophy, and the development of the GreatFET hardware hacking tool. He details technical advancements in spectrum monitoring, including rapid sweeping algorithms and software interfaces for security researchers, while also covering his upcoming talks at Black Hat and DEF CON regarding spectrum analysis and spread spectrum systems. The conversation highlights the growing intersection of software and hardware security, the use of specialized components like GreenPak chips for level shifting, and the broader ecosystem of hardware hacking conferences and training.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.