# 055 - Stacks Of Bricked Chips

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2022-03-13
- Length: 1h 01m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips
- Listen: https://unnamedre.com/episode/55

## Summary

Laura Abbott, a software developer at Oxide Computer, explains how her team reverse engineered the NXP LPC55S69 microcontroller to build a root of trust for their servers. She details discovering an undocumented ROM patching hardware block that allowed privilege escalation, leading to a CVE and a DEF CON presentation. Abbott also discusses her background in Linux kernel development, the transition to Rust for microcontrollers, and the challenges of working with contradictory chip documentation.

## Chapters

- [0:28](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=28) Introduction: Laura Abbott and Oxide Computer
- [3:01](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=181) Building a Root of Trust with NXP LPC55S69
- [8:06](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=486) Bricking Chips and Reverse Engineering ROM
- [14:37](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=877) Discovering Undocumented ROM Patching Hardware
- [26:05](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=1565) Bypassing TrustZone-M and Privilege Escalation
- [39:34](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=2374) Linux Kernel Development and Community Dynamics
- [51:16](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips#t=3076) C Language Evolution and Toolchain Updates

## Topics

- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)

## Most relevant to

early-stage companies

## Mentioned

- Oxide Computer (company)
- NXP (company)
- LPC55S69 (chip)
- Ghidra (tool)
- TrustZone-M (other)
- TrustedFirmware-M (other)
- Hubris (other)

## Related episodes from other shows

- [Another LPC55 ROM Vulnerability](https://hardwarepodcasts.com/podcast/oxide-and-friends/2022-04-05-another-lpc55-rom-vulnerability) (Oxide and Friends)
- [Finding Hardware Flaws with Laura Abbott](https://hardwarepodcasts.com/podcast/the-amp-hour/2022-05-23-finding-hardware-flaws-with-laura-abbott) (The Amp Hour)
- [414: Puff, the Magically Secure Dragon](https://hardwarepodcasts.com/podcast/embedded-fm/2022-05-26-414-puff-the-magically-secure-dragon) (Embedded.fm)
- [Ep 387: Superhuman Clocks, CAN in USB-C, and the Joys of Bare Metal](https://hardwarepodcasts.com/podcast/hackaday-podcast/2026-09-18-ep-387-superhuman-clocks-can-in-usb-c-and-the-joys-of-bare-metal) (Hackaday Podcast)
- [111: Potty Train Your Tamagotchi (Repeat)](https://hardwarepodcasts.com/podcast/embedded-fm/2017-07-19-111-potty-train-your-tamagotchi-repeat) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-03-13-055-stacks-of-bricked-chips. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.