Hardware Podcasts

047 - The Sun, The Moon, The Stars

Unnamed Reverse Engineering Podcast · 16 May 2021 · 50m

What this episode covers

Jen Castillo and Alvaro Prieto discuss recent reverse engineering projects, including Colin O'Flynn's teardown of the Apple AirTag, which revealed an nRF52 microcontroller and a vulnerability allowing firmware dumping via the Pocket Glitcher. They also cover a method to transmit arbitrary data through Apple's Find My network, a 70% reduction in GTA Online loading times by patching a slow JSON parser, and reverse engineering of Reolink IP cameras and eInk price tags. The hosts highlight past guests' work on the LPC55S69 microcontroller and the Asahi Linux project for the Apple M1 processor, noting a trend toward better security practices in hardware design.

Most relevant to

makers and hobbyists

Topics

Mentioned

Companies
Reolink
Products
Apple AirTag, GTA Online, Phasmophobia
Chips
nRF52, LPC55S69, Apple M1
Tools
Pocket Glitcher
Also
Asahi Linux

Related episodes from other shows

Other shows on the same ground, closest first.

  • Hackaday Podcast · 1h 04m

    Ep 311: AirTag Hack, GPS Rollover, and a Flat-Pack Toaster

    Hosts Elliot Williams and Tom Nardi discuss David Cuartielles, co-founder of Arduino, who will keynote Hackaday Europe on compostable electronics. They analyze a research paper on hijacking Apple AirTag infrastructure by exploiting weak Bluetooth Low Energy address randomization, and detail how a flat-pack toaster by Casey Ho prioritizes repairability and user assembly over aesthetics. The episode also covers a GPS week-number rollover workaround using an RP2040, a fiber-optic display mapped via computer vision, and a review of hardware presence at FOSDEM 2025.

    Wireless & RFMechanical engineering
    10 chapters

  • The Amp Hour · 1h 14m

    Cassette decks have browsers?

    Dave Jones and Chris Gammell discuss the teardown of the Apple AirTag, analyzing its nRF52832 chip, U1 ultra-wideband transceiver, and asset-tracking architecture. They contrast this with Amazon's Sidewalk IoT network, the challenges of EV vehicle-to-load technology, and the complexities of repairing vintage surround sound receivers. The conversation also covers the acquisition of Supply Frame by Siemens, the lack of standardization in EDA library management, and the controversial acquisition of Audacity by Muse.

    Connected products & IoTPCB design & layout
    9 chapters

  • Oxide and Friends · 1h 21m

    Another LPC55 ROM Vulnerability

    Laura Abbott, a security engineer at Oxide Computer Company, details the discovery of a second vulnerability in the NXP LPC55S69 microcontroller's ROM, which serves as Oxide's hardware root of trust. She explains how reverse engineering the undocumented ROM using Ghidra revealed a buffer overflow in the signed update parser that allowed extraction of device secrets before the system locked down. The episode covers the initial disclosure process, NXP's eventual receptiveness, and the broader industry challenges regarding transparency, CVEs, and the difficulty of securing general-purpose microcontrollers.

    Debugging & failure analysisSecurity & privacy
    13 chapters

  • Embedded.fm · 58m

    414: Puff, the Magically Secure Dragon

    Laura Abbott, a firmware engineer at Oxide Computing, discusses two silicon bugs found in the NXP LPC55S69 microcontroller, including a buffer overflow in the ROM that allows cloning the device's PUF identity. She explains how she used Ghidra to reverse-engineer the undocumented ROM code and details the security implications for TrustZone and Secure Boot. The conversation also covers Oxide's approach to hiring, their use of Rust for firmware, and the challenges of working with proprietary silicon.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

    Security & privacyDebugging & failure analysis
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.