065 - Multitalented Grinch

Unnamed Reverse Engineering Podcast · 30 Jul 2023 · 1h 03m

What this episode covers

Hosts Alvaro Brieto and Jen discuss their recent attendance at Open Sauce and the Crowd Supply teardown conference, highlighting the community aspect of hardware reverse engineering. They review several books on security and hacking history, including 'ARM Assembly and Reverse Engineering' and 'Murdoch's Pirates', while also sharing news about past guests like David from Cyber City Circuits teaching the First Lady to solder. The episode concludes with technical discussions on CAN bus vulnerabilities in Toyota vehicles, hotel IoT security, and Alvaro's new DJI Mic recording setup for upcoming coverage at CCCamp.

Mentioned

Companies
Crowd Supply, Cyber City Circuits, Toyota
Products
Hello Barbie, RAV4, DJI Mic
Also
Open Sauce, ARM Assembly and Reverse Engineering, Murdoch's Pirates

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 13m

    An Interview with Trammell Hudson

    Trammell Hudson, a hardware and firmware security researcher, discusses his diverse projects including reverse engineering Canon cameras with Magic Lantern, discovering a time-of-check-time-of-use vulnerability in Intel Boot Guard, and building the SpySpy FPGA tool. He details his work on retro computing, such as vector display emulation and finding Easter eggs in Mac SE ROMs, as well as his security research on Puma robot arms and passive RFID tags. Hudson explains his philosophy on open-source firmware through projects like Linux Boot and Coreboot, emphasizing user control and security transparency.

  • The Amp Hour · 1h 23m

    An Interview with Samy Kamkar

    Samy Kamkar, an independent security researcher, discusses his journey from hacking Counter-Strike and MySpace to creating hardware exploits like Roll Jam and MagSpoof. He details how he used off-the-shelf components like the Raspberry Pi, Teensy, and TI CC1101 to demonstrate vulnerabilities in drones, car key fobs, and credit card systems. Kamkar emphasizes the importance of open-source hardware and low-cost tools like the Yardstick One and Proxmark in making security research accessible, while highlighting the growing security risks of IoT devices.

  • Embedded.fm · 1h 05m

    149: Flamethrowers Aside

    Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

  • Hackaday Podcast · 1h 10m

    Ep 387: Superhuman Clocks, CAN in USB-C, and the Joys of Bare Metal

    Hackaday editors Elliot Williams and Tom Nardi discuss recent community hacks, including Mikey Sklar's work to bring MicroPython's Viper and empy cross speedups to CircuitPython, and Bas Bottberg's reverse engineering of a Bluetooth printer using bleak. They also cover Ben's complete firmware rewrite of an E-grooter in Rust, which involved discovering CAN bus over USB-C, and Egg Karate Singh's complex mechanical clocks like Ovodio. The episode concludes with Hackaday Europe talks: Sylvain's bare metal 'Minimacy' virtual machine for security-critical applications, and Janelle Wellen's presentation on space mission hacks and troubleshooting.

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.