# 061 - A Case of the Sniffles

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2022-11-09
- Length: 1h 00m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles
- Listen: https://reverseengineering.libsyn.com/061-a-case-of-the-sniffles

## Summary

Sultan Qasim Khan, a security consultant at NCC Group, discusses his work in Bluetooth Low Energy (BLE) security, including the development of Sniffle, a tool for reliable BLE packet capture. He explains how Sniffle overcomes the limitations of previous tools like Ubertooth by utilizing TI and Nordic hardware to support Bluetooth 5 features like 2 Mbps and coded PHY. Khan also details his research on BLE relay attacks, demonstrating how lower-level relaying can bypass latency detection in systems like Tesla key fobs, and mentions his work on nOBEX for fuzzing car infotainment systems.

## Chapters

- [0:01](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=1) Introduction and Guest Background
- [2:08](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=128) Reverse Engineering FTDI and Motorola Internship
- [8:22](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=502) BLE Attacks and Ubertooth Limitations
- [12:38](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=758) Sniffle: Hardware and Bluetooth 5 Support
- [30:43](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=1843) BLE Relay Attacks and Secure Ranging
- [49:20](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=2960) nOBEX and Car Infotainment Fuzzing
- [52:13](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles#t=3133) Favorite Tools: Vim and Grep

## Topics

- [Wireless & RF](https://hardwarepodcasts.com/topic/wireless-and-rf)
- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)

## Most relevant to

early-stage companies

## Mentioned

- Libusb (tool)
- FTDI (chip)
- D2XX (tool)
- Motorola Mobility (company)
- NCC Group (company)
- Mike Ryan (other)
- Ubertooth (product)
- Ellisys (company)
- TI (company)
- Nordic (company)
- Sniffle (product)
- nOBEX (product)
- Tesla (company)

## Related episodes from other shows

- [232: Blob Is a Good Word](https://hardwarepodcasts.com/podcast/embedded-fm/2018-02-02-232-blob-is-a-good-word) (Embedded.fm)
- [#001: The future of Bluetooth connectivity with Blecon Founder, Simon Ford](https://hardwarepodcasts.com/podcast/coredump-sessions/2024-11-27-001-the-future-of-bluetooth-connectivity-with-blecon-founder-simon-ford) (Coredump Sessions)
- [How Bluetooth Low Energy (BLE) Is Made for IoT | Mohammad Afaneh, Founder of Novel Bits | #AskIoT E010](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-02-13-how-bluetooth-low-energy-ble-is-made-for-iot-mohammad-afaneh-founder-of-novel-bi) (IoT For All Podcast)
- [117: In as Much as Which](https://hardwarepodcasts.com/podcast/embedded-fm/2015-09-09-117-in-as-much-as-which) (Embedded.fm)
- [62: Costs a Penny to Go to the Bathroom](https://hardwarepodcasts.com/podcast/embedded-fm/2014-08-06-62-costs-a-penny-to-go-to-the-bathroom) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-11-09-061-a-case-of-the-sniffles. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.
