Hardware Podcasts

028 - Everyone Has a Bag of Tricks

Unnamed Reverse Engineering Podcast · 15 Sept 2019 · 1h 14m

What this episode covers

Johnny Xmas (@J0hnnyXm4s), a security architect and reverse engineer, discusses his career path from pharmacy to infosec and details the community effort to reverse engineer TSA master keys. He explains how the keys were leaked via a vendor catalog and Instagram, and how the community used 3D printing and lock disassembly to create working copies, highlighting the security implications for luggage and encryption. Xmas also describes his work at Kasada, a company that defends web infrastructure against automated abuse by detecting client-side automation rather than relying on traditional Web Application Firewalls (WAFs).

Most relevant to

companies scaling up

Topics

Mentioned

Companies
Kasada, Luminati, MonkeySocks, Target
Products
Hola VPN, Stuxnet
Tools
Postman, Burp Suite
Also
Deviant Ollam, IronGeek, DarkSim905, Nite 0wl, Zach Whittaker, MS08-067, StackOverflow

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 12m

    259: Calculators Changed My Life

    Brandon Wilson, a software developer and security consultant, discusses his decades-long journey of hacking Texas Instruments graphing calculators, starting from middle school. He details the technical evolution of TI's security measures, including the use of Z80 and Motorola 68K processors, flash unlock exploits, and the eventual factorization of 512-bit RSA signing keys by the community. Wilson also describes his reverse engineering of a limited-edition Sega Genesis game cartridge and his work on abusing USB protocols to jailbreak the PlayStation 3 and modify cheap USB flash drive firmware.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • Embedded.fm · 1h 06m

    519: The Password Is All Zeros

    Mark Omo and James Rowley from Marcus Engineering discuss their research into SECURAM safe locks, revealing that the ProLogic series contains critical security flaws, including a debug port password set to all zeros and codes stored on the external keypad. They detail two exploits, 'code snatch' and 'reset heist,' which allow unauthorized access to safes used for pharmaceuticals and cash, despite UL high-security certification. The conversation covers the ethical and legal challenges of responsible disclosure, including threats from SECURAM's legal team and support from the EFF's Coders' Rights Project.

    Security & privacyDebugging & failure analysis
    8 chapters

  • Hackaday Podcast · 1h 07m

    Ep 182: Sparkpunk Photography, Anti-Xiomi Air Filters, and Keyfob Foibles

    Hackaday editors Elliot Williams and Tom Nardi discuss the rapid sell-out of Supercon tickets, the John Deere tractor hack at DEFCON, and a critical 'rollback' vulnerability in car key fobs that allows permanent unauthorized access. They also cover the debate over 3D CAD file formats (STEP vs. STL), a DIY magnetron sputtering rig for making daguerreotypes, and software for home PCB production using SLA printers. The episode concludes with a look at a Game Boy flashcart, Starlink ground station hacking, and a deep dive into obsolete Scenix microcontrollers by Al Williams.

    Security & privacyPCB design & layout
    10 chapters

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

    Debugging & failure analysisSecurity & privacy
    8 chapters

  • Hackaday Podcast · 58m

    Ep 193: Found Computers, Internet Over WhatsApp, Two-Factor C64, Shifting Cars, and Self-Shooting Fighter Planes

    Editors Elliot Williams and Dan Maloney review a week of hacks, including tunneling IP over WhatsApp, generating 2FA codes on a Commodore 64, and emulating ISA cards with an FPGA. They discuss the security of a Zap Tech EV charger, the prevalence of Linux in scavenged smart TVs, and repurposing 3D printers for lab automation. The episode concludes with a discussion on the F-11 Tiger's self-shooting incident and the importance of physical modeling in engineering.

    Debugging & failure analysisSecurity & privacy
    9 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.