Hardware Podcasts

061 - A Case of the Sniffles

Unnamed Reverse Engineering Podcast · 9 Nov 2022 · 1h 00m

What this episode covers

Sultan Qasim Khan, a security consultant at NCC Group, discusses his work in Bluetooth Low Energy (BLE) security, including the development of Sniffle, a tool for reliable BLE packet capture. He explains how Sniffle overcomes the limitations of previous tools like Ubertooth by utilizing TI and Nordic hardware to support Bluetooth 5 features like 2 Mbps and coded PHY. Khan also details his research on BLE relay attacks, demonstrating how lower-level relaying can bypass latency detection in systems like Tesla key fobs, and mentions his work on nOBEX for fuzzing car infotainment systems.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Motorola Mobility, NCC Group, Ellisys, TI, Nordic, Tesla
Products
Ubertooth, Sniffle, nOBEX
Chips
FTDI
Tools
Libusb, D2XX
Also
Mike Ryan

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 10m

    232: Blob Is a Good Word

    Jackson Keating, a firmware engineer at Identity Card who previously worked on Bluetooth stacks at Podo Labs, explains the architecture of Bluetooth Low Energy (BLE), focusing on the GATT database structure of services, characteristics, and descriptors. The hosts and guest discuss the practical differences between BLE and Wi-Fi, the role of advertising packets in device discovery, and the complexities of pairing and security. They also compare development experiences with Nordic nRF chips and Texas Instruments CC26xx devices, recommending vendor tutorials and the Core Bluetooth API for learning.

    Wireless & RFMicrocontrollers & dev platforms
    7 chapters

  • Coredump Sessions · 1h 08m

    #001: The future of Bluetooth connectivity with Blecon Founder, Simon Ford

    Simon Ford, founder of Blecon, joins Memfault’s Chris Coleman and François Baldassari to discuss the evolution of Bluetooth Low Energy (BLE) from its Nokia origins to its current role in cloud-connected devices. The group analyzes key technical shifts like LE Audio, PAwR, and coded PHY, while debating the practical trade-offs of BLE for IoT, asset tracking, and audio compared to Wi-Fi, cellular, and UWB. They also cover the challenges of BLE interoperability, debugging connection issues in the wild, and the limited real-world adoption of Bluetooth Mesh.

    Wireless & RFDebugging & failure analysis
    8 chapters

  • IoT For All Podcast · 31m

    How Bluetooth Low Energy (BLE) Is Made for IoT | Mohammad Afaneh, Founder of Novel Bits | #AskIoT E010

    Mohammad Afaneh, founder of Novel Bits, explains the role of Bluetooth Low Energy (BLE) in the IoT landscape, contrasting it with Classic Bluetooth and Bluetooth Mesh. He details how BLE's low power consumption and smartphone ubiquity make it ideal for asset tracking, device configuration, and industrial automation, while discussing the future impact of Bluetooth 5's long-range and high-speed modes. Afaneh also advises engineers to prioritize hands-on implementation over theoretical study when learning new wireless technologies.

    Wireless & RFConnected products & IoT
    8 chapters

  • Embedded.fm · 57m

    117: In as Much as Which

    Hosts Elecia White and Christopher White discuss listener emails covering Bluetooth 4.2 security, the definition of masked ROM, and the use of the volatile keyword in C. They review Elecia's work on precision mice feeders and bike lights, and detail their disassembly of BB-8 robots for competitive analysis of their BLE and inertial sensors. The episode concludes with commentary on Amazon's work culture and drone regulations.

    Wireless & RFEmbedded firmware
    8 chapters

  • Embedded.fm · 1h 05m

    62: Costs a Penny to Go to the Bathroom

    Josh Bleecher Snyder, Director of Software Engineering at PayPal, discusses the development of PayPal Beacon, a Bluetooth Low Energy (BLE) hardware device for merchant check-ins, and his prior work at Card.io on mobile computer vision. He details the engineering challenges of using BLE for always-on presence, the security architecture involving cryptographic signatures between the beacon, merchant phone, and PayPal servers, and the decision to use the Go programming language for its concurrency and developer experience. Snyder also covers the transition from founding Card.io to working at a large enterprise, highlighting the cultural shift and the use of tools like Docker and Theano for machine learning.

    Wireless & RFSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.