Hardware Podcasts

039 - Changing the Nature of Reality

Unnamed Reverse Engineering Podcast · 13 Sept 2020 · 1h 01m

What this episode covers

Natalie Silvanovich, a member of Google's Project Zero, discusses her extensive reverse engineering of Tamagotchi devices, detailing how she bypassed epoxy blobs using nitric acid and exploited memory timing vulnerabilities to dump firmware from GeneralPlus chips. She explains the evolution of the devices from simple 6502-based systems to modern ARM-based models with Bluetooth, Android apps, and Unity engines, while also touching on her professional work finding remote code execution vulnerabilities in WebRTC and Flash implementations. The conversation covers the small but dedicated community of Tamagotchi hackers, including Mr. Blinky and Boulter, and highlights the tools she uses, such as IDA, Ghidra, and Frida, to analyze both hardware and software components.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Project Zero, Blackberry, Kwartzlab
Products
Tamagotchi, MyMeets
Chips
GeneralPlus
Tools
Apktool, androguard, IDA, Ghidra, Frida
Also
Travis Goodspeed, Mr. Blinky, SpritesMods, smali, Unity, Adobe Flash, Adobe AIR, WebRTC, PJSIP

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 50m

    111: Potty Train Your Tamagotchi

    Natalie Silvanovich, a security engineer at Google's Project Zero, discusses her reverse engineering of Tamagotchi devices, ranging from early 6502-based models to modern NFC-enabled versions. She details how she bypassed General Plus mask ROM limitations using a vulnerability in programmable figure accessories to dump code and create a Tamagotchi development kit. Silvanovich also explains her 'Hardware Excuse Generator' tool and her work on Flash exploits, highlighting the contrast between high-end mobile security and low-end hardware constraints.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • Embedded.fm · 1h 12m

    259: Calculators Changed My Life

    Brandon Wilson, a software developer and security consultant, discusses his decades-long journey of hacking Texas Instruments graphing calculators, starting from middle school. He details the technical evolution of TI's security measures, including the use of Z80 and Motorola 68K processors, flash unlock exploits, and the eventual factorization of 512-bit RSA signing keys by the community. Wilson also describes his reverse engineering of a limited-edition Sega Genesis game cartridge and his work on abusing USB protocols to jailbreak the PlayStation 3 and modify cheap USB flash drive firmware.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 13m

    An Interview with Trammell Hudson

    Trammell Hudson, a hardware and firmware security researcher, discusses his diverse projects including reverse engineering Canon cameras with Magic Lantern, discovering a time-of-check-time-of-use vulnerability in Intel Boot Guard, and building the SpySpy FPGA tool. He details his work on retro computing, such as vector display emulation and finding Easter eggs in Mac SE ROMs, as well as his security research on Puma robot arms and passive RFID tags. Hudson explains his philosophy on open-source firmware through projects like Linux Boot and Coreboot, emphasizing user control and security transparency.

    Security & privacyEmbedded firmware
    8 chapters

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

    Debugging & failure analysisSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.