Hardware Podcasts

070 - I Have a DediProblem

Unnamed Reverse Engineering Podcast · 9 Jun 2024 · 1h 56m

What this episode covers

Jesse Michael and Mickey Shkatov from Eclypsium discuss the intricacies of BIOS and UEFI reverse engineering, tracing their careers from Intel to their current startup. They detail specific research projects, including an exploit of a Nissan Leaf's telematics unit and a DMA attack on Intel WiGig, while explaining the technical evolution from legacy BIOS to UEFI. The conversation covers practical tools for hardware debugging, such as DediProg programmers and Intel DCI, and explores the emerging scene of UEFI-based game cheating and System Management Mode vulnerabilities.

Most relevant to

large enterprises and early-stage companies

Topics

Mentioned

Companies
Eclypsium, Intel
Products
Nissan Leaf, Damn Vulnerable UEFI, Coreboot
Chips
Intel Management Engine
Tools
DediProg SF100, UEFITool, chipsec, QEMU, VMware Workstation, Binary Ninja, IDA, me_cleaner
Also
platomav

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 08m

    An interview with Alvaro and Jen from the URE Podcast

    Alvaro Prieto and Jen, hosts of the Unnamed Reverse Engineering Podcast, discuss their backgrounds in firmware engineering at companies like Apple, Amazon, and Planet. They contrast the high-volume, rapid-cycle nature of consumer electronics with the flexible timelines of industrial hardware, highlighting challenges like silicon errata, OTA update strategies, and the difficulty of finding competent firmware engineers. The conversation covers reverse engineering techniques, including protocol analysis and firmware dumping, inspired by creators like Micah Elizabeth Scott and Dimitri Greenberg.

    Embedded firmwareManufacturing partners & offshoring
    9 chapters

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • Embedded.fm · 1h 38m

    200: Oops

    Hosts Alicia and Christopher White celebrate the 200th episode of Embedded.fm with a panel of former guests: Alvaro Prieto, Andrei Chichak, Elizabeth Brenner, Chris Svec, and Chris Gammell. The group discusses their favorite embedded tools, including Saleae logic analyzers, Digilent Analog Discovery, Beyond Compare, and HP16C calculators, while sharing humorous field stories and interview anecdotes. They reflect on the joys of working in embedded systems, such as seeing products on retail shelves and the satisfaction of debugging complex hardware-software interactions.

    Embedded firmwareDebugging & failure analysis
    10 chapters

  • Oxide and Friends · 1h 50m

    Holistic Engineering with Robert Mustacchi

    Robert Mustacchi, a co-founder and key engineer at Oxide Computer Company, discusses the company's holistic approach to building rack-scale servers, from board design to firmware. He details the engineering challenges of eliminating BIOS/UEFI by reverse-engineering AMD's AGESA code, debugging the Spectre and Meltdown vulnerabilities in early Joyent systems, and resolving a PCIe link training failure on the T6 NIC during manufacturing. Mustacchi emphasizes the importance of hardware-software co-design, deep system observability, and anticipating operational issues like firmware upgradability before they occur.

    Debugging & failure analysisEmbedded firmware
    5 chapters

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

    Debugging & failure analysisSecurity & privacy
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.