Hardware Podcasts

059 - Instant Nerd Snipe

Unnamed Reverse Engineering Podcast · 4 Jul 2022 · 1h 02m

What this episode covers

Mike Ryan, founder of Ice9 Consulting and a Bluetooth security expert, joins the hosts to discuss reverse engineering RF protocols and the state of software-defined radio (SDR) tools. He details his methodology for analyzing custom RF signals using tools like Inspectrum and Baudline, explains how to identify modulation types like OOK and FSK, and shares insights on hardware choices like the HackRF and Ubertooth. Ryan also discusses his upcoming open-source Bluetooth sniffer for SDRs, the challenges of virtualization on M1 Macs, and the importance of using standard protocols like BLE over custom RF for security.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Ice9 Consulting, Nordic
Chips
NRF24, CC2400
Tools
HackRF, Inspectrum, Ubertooth, Yardstick One, Baudline, URH, Wireshark, Kismet

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Amp Hour · 28m

    #397.6 - An Interview with Matt Knight

    Matt Knight, an electrical engineer and security researcher, discusses his work at ToorCamp on using Software Defined Radios (SDRs) to reverse-engineer and fuzz RF protocols. He details his research into LoRa physical layer modulation, specifically chirp spread spectrum, and the security implications of LoRaWAN. Knight also introduces TumbleRF, an open-source fuzzing framework he developed with Ryan Spears to automate the discovery of vulnerabilities in wireless devices, and his custom hardware project, Orthris, designed to overcome USB latency limitations in RF testing.

    Wireless & RFSecurity & privacy
    6 chapters

  • The Amp Hour · 1h 43m

    Conning with Michael Ossmann

    Michael Ossmann of Great Scott Gadgets discusses the HackRF software defined radio, his company's open source hardware philosophy, and the development of the GreatFET hardware hacking tool. He details technical advancements in spectrum monitoring, including rapid sweeping algorithms and software interfaces for security researchers, while also covering his upcoming talks at Black Hat and DEF CON regarding spectrum analysis and spread spectrum systems. The conversation highlights the growing intersection of software and hardware security, the use of specialized components like GreenPak chips for level shifting, and the broader ecosystem of hardware hacking conferences and training.

    Wireless & RFSecurity & privacy
    8 chapters

  • The Amp Hour · 1h 51m

    "Impedance Matching" With Charvat And Ossmann - Recurring RF Remontados

    Greg Charvat, an entrepreneur and radar expert known for the MIT coffee can radar, and Michael Ossmann of Great Scott Gadgets, creator of the HackRF software-defined radio (SDR), discuss the technical details of SDR, radar design, and RF security. They explore the architecture of the HackRF, specifically its decision to omit an FPGA to reduce cost and power, and discuss how to integrate it with low-cost FMCW radar modules for range-Doppler imaging. The conversation also covers Ossmann's work on RF retro-reflectors for the NSA Playset project, the challenges of interference in the 2.4 GHz band, and the regulatory landscape for devices like the GoTenna.

    Wireless & RFMicrocontrollers & dev platforms
    8 chapters

  • The Amp Hour · 1h 54m

    An Interview with Derek Kozel

    Derek Kozel, an electrical engineer at Ettus Research (a National Instruments subsidiary) and a GNU Radio Foundation officer, discusses software-defined radio (SDR) and its applications in amateur radio and research. He explains how GNU Radio provides open-source building blocks for digital signal processing, enabling users to analyze signals from weather satellites and AIS data using low-cost hardware like the RTL-SDR. The conversation highlights the transition from analog to digital communication, emphasizing the educational value of visualizing signal processing in real-time. Kozel also details the open-source governance of GNU Radio, noting recent leadership changes and the importance of community-driven development and documentation.

    Wireless & RFEmbedded firmware
    10 chapters

  • The Amp Hour · 1h 44m

    Pedantic or Andrantic

    Chris Gammell, a developer advocate at Hologram and founder of Contextual Electronics, joins Elecia and Chris White of Embedded.fm to discuss hardware prototyping, learning strategies, and industry tools. The conversation covers the challenges of cellular IoT connectivity, the utility of the HackRF software-defined radio, and debugging techniques using the J-Trace Pro. They also explore pedagogical concepts like the Dreyfus model for learning programming and hardware, emphasizing the importance of iteration and mental health in engineering careers.

    Embedded firmwareDebugging & failure analysis
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.