068 - The Monkey Button

Unnamed Reverse Engineering Podcast · 7 Apr 2024 · 1h 08m

What this episode covers

Lori Wired, a reverse engineer specializing in mobile malware and a YouTube educator, discusses the challenges and techniques of analyzing Android and iOS applications. She explains the shift in malware tactics toward native code and packers to evade static analysis, highlighting tools like Ghidra and Frida for dynamic instrumentation. The conversation also covers her community engagement through Twitter Spaces and malware trivia, as well as her perspective on the mobile threat landscape and the Xcode Ghost supply chain attack.

Mentioned

Companies
Kasperski
Products
Space Cadet Pinball, Xcode Ghost
Tools
Ghidra, IDA, Frida, Medusa, UPX, RetroBar
Also
Operation Triangulation

Other shows on the same ground, closest first.

  • The Pragmatic Embedded Podcast · 48m

    Offensive Cybersecurity with Ryan Torvik

    Ryan Torvik, founder and CEO of Tulip Tree Technology, explains the offensive cybersecurity mindset and how it applies to securing embedded systems. He details techniques for extracting and analyzing firmware using tools like IDA Pro and Ghidra, and discusses the importance of designing security from the start, including using standard libraries and secure languages like Rust. Torvik also describes Tulip Tree's emulation technology, which models hardware behavior to allow developers to test firmware and detect vulnerabilities without physical hardware.

  • Embedded.fm · 50m

    111: Potty Train Your Tamagotchi

    Natalie Silvanovich, a security engineer at Google's Project Zero, discusses her reverse engineering of Tamagotchi devices, ranging from early 6502-based models to modern NFC-enabled versions. She details how she bypassed General Plus mask ROM limitations using a vulnerability in programmable figure accessories to dump code and create a Tamagotchi development kit. Silvanovich also explains her 'Hardware Excuse Generator' tool and her work on Flash exploits, highlighting the contrast between high-end mobile security and low-end hardware constraints.

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

  • Embedded.fm · 57m

    117: In as Much as Which

    Hosts Elecia White and Christopher White discuss listener emails covering Bluetooth 4.2 security, the definition of masked ROM, and the use of the volatile keyword in C. They review Elecia's work on precision mice feeders and bike lights, and detail their disassembly of BB-8 robots for competitive analysis of their BLE and inertial sensors. The episode concludes with commentary on Amazon's work culture and drone regulations.

  • The Amp Hour · 1h 10m

    A Meeting Of The Davids

    Dave Jones and David Ledger of EEVblog discuss the development of the EEVblog multimeter app, detailing the technical challenges of implementing Bluetooth Low Energy (BLE) on Android and the decision to use the Mono framework for cross-platform compatibility. They also cover the resolution of the trademark dispute between Arduino founders Massimo Banzi and Federico Musto, news of Qualcomm's acquisition of NXP, and Samsung surpassing Intel in chip sales volume. The conversation concludes with a debate on the feasibility of autonomous vehicles and a tribute to analog guru Bob Pease.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.