# 051 - Collecting Students With Similar Names

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2021-10-05
- Length: 1h 28m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names
- Listen: https://unnamedre.com/episode/51

## Summary

Jiska Classen (@naehrdine), a security researcher at the Secure Mobile Networking Lab at TU Darmstadt, discusses her work in reverse engineering wireless hardware, focusing on Broadcom Bluetooth chips and iOS devices. She details the creation of tools like Internal Blue and Frankenstein to patch and emulate Broadcom firmware, and explains how Frida and ToothPicker are used to fuzz and analyze the iOS Bluetooth daemon. The conversation also covers the reverse engineering of AirTags, including custom sound playback and privacy features, and the development of the AirGuard app for Android.

## Chapters

- [0:29](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=29) Introduction and Fitbit Reverse Engineering
- [18:46](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=1126) Broadcom Firmware Patching and Internal Blue
- [33:02](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=1982) Frankenstein Emulator and Polypus Diffing
- [44:51](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=2691) iOS Jailbreaking and Frida for Bluetooth Analysis
- [1:07:59](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=4079) AirTag Reverse Engineering and AirGuard
- [1:16:16](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names#t=4576) Community Events and Fuzzing ComCenter

## Topics

- [Wireless & RF](https://hardwarepodcasts.com/topic/wireless-and-rf)
- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)

## Most relevant to

makers and hobbyists

## Mentioned

- Fitbit (product)
- Broadcom (company)
- Cypress (company)
- Internal Blue (tool)
- Frankenstein (tool)
- Polypus (tool)
- Frida (tool)
- ToothPicker (tool)
- AirTag (product)
- AirGuard (product)
- Checkra1n (tool)
- IDA (tool)
- Ghidra (tool)
- QEMU (tool)
- Objection (tool)

## Related episodes from other shows

- [Ep 311:  AirTag Hack, GPS Rollover, and a Flat-Pack Toaster](https://hardwarepodcasts.com/podcast/hackaday-podcast/2025-03-07-ep-311-airtag-hack-gps-rollover-and-a-flat-pack-toaster) (Hackaday Podcast)
- [117: In as Much as Which](https://hardwarepodcasts.com/podcast/embedded-fm/2015-09-09-117-in-as-much-as-which) (Embedded.fm)
- [Ep 378: C Coders, Ceramic Printers, and Shadow Archives](https://hardwarepodcasts.com/podcast/hackaday-podcast/2026-07-17-ep-378-c-coders-ceramic-printers-and-shadow-archives) (Hackaday Podcast)
- [Cassette decks have browsers?](https://hardwarepodcasts.com/podcast/the-amp-hour/2021-05-24-cassette-decks-have-browsers) (The Amp Hour)
- [An Interview with Dmitry Nedospasov](https://hardwarepodcasts.com/podcast/the-amp-hour/2016-06-17-an-interview-with-dmitry-nedospasov) (The Amp Hour)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2021-10-05-051-collecting-students-with-similar-names. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.