Hardware Podcasts

053 - It's Hammer Time!

Unnamed Reverse Engineering Podcast · 16 Dec 2021 · 1h 40m

What this episode covers

Hash, a reverse engineer known for smart meter hacking, discusses his journey from self-taught electronics hobbyist to analyzing critical infrastructure. He details his reverse engineering of the Neato XV-11 robot vacuum's LIDAR to win a bounty, and his current work using Software Defined Radios (SDRs) like the HackRF and Yardstick One to analyze Landis+Gyr smart meters. Hash explains how he bypassed frequency hopping by transmitting on all channels simultaneously and highlights the security risks of these devices, including data leakage from decommissioned hardware found on eBay.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Landis+Gyr, Neato, Sense
Products
Precursor
Tools
HackRF One, Yardstick One, USRP B200, Saleae Logic Analyzers, Beagle I2C/SPI Protocol Analyzer
Also
RECESSIM

Related episodes from other shows

Other shows on the same ground, closest first.

  • Hackaday Podcast · 1h 07m

    Ep 223: Smoking Smart Meter, 489 Megapixels, and Unshredding Documents

    Hosts Elliot Williams and Dan Maloney review recent hardware hacks, including a debunked Flipper Zero smart meter hoax, a 489-megapixel camera built from a scanner, and an all-transistor HP 5245L frequency counter. They also discuss the challenges of restoring Stasi documents, the decline of smart speakers, and various community projects like FreeCAD tutorials and ultrasonic sensor arrays. The episode highlights the gap between theoretical ease and practical difficulty in reverse engineering and document reconstruction.

    Debugging & failure analysisPCB design & layout
    9 chapters

  • The Amp Hour · 1h 23m

    An Interview with Samy Kamkar

    Samy Kamkar, an independent security researcher, discusses his journey from hacking Counter-Strike and MySpace to creating hardware exploits like Roll Jam and MagSpoof. He details how he used off-the-shelf components like the Raspberry Pi, Teensy, and TI CC1101 to demonstrate vulnerabilities in drones, car key fobs, and credit card systems. Kamkar emphasizes the importance of open-source hardware and low-cost tools like the Yardstick One and Proxmark in making security research accessible, while highlighting the growing security risks of IoT devices.

    Security & privacyWireless & RF
    7 chapters

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

    Security & privacyDebugging & failure analysis
    7 chapters

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 28m

    #397.6 - An Interview with Matt Knight

    Matt Knight, an electrical engineer and security researcher, discusses his work at ToorCamp on using Software Defined Radios (SDRs) to reverse-engineer and fuzz RF protocols. He details his research into LoRa physical layer modulation, specifically chirp spread spectrum, and the security implications of LoRaWAN. Knight also introduces TumbleRF, an open-source fuzzing framework he developed with Ryan Spears to automate the discovery of vulnerabilities in wireless devices, and his custom hardware project, Orthris, designed to overcome USB latency limitations in RF testing.

    Wireless & RFSecurity & privacy
    6 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.