071 - Snerd Niped

Unnamed Reverse Engineering Podcast · 7 Sept 2024 · 1h 31m

What this episode covers

Thomas Roth (Stacksmashing) discusses his recent hardware reverse engineering projects, including bypassing the lock on iPhone 15 and MacBook M3 chips using the Ace 3 controller and tools like the Central Scrutinizer and Tamarin-C. He also details a low-cost BitLocker key sniffer built with a Raspberry Pi Pico and his work with HexTree.io on the RP2350 Hacking Challenge and the Faultier glitching tool. Roth emphasizes the importance of accessible, open-source hardware security tools for education and community learning.

Mentioned

Companies
HexTree.io
Products
iPhone 15, MacBook M3, Tamarin-C, BitLocker, Raspberry Pi Pico, Faultier
Chips
Ace 3, RP2350
Tools
Central Scrutinizer
Also
Stacksmashing, Asahi Linux, DEFCON, Black Hat, CCC

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 23m

    An Interview with Samy Kamkar

    Samy Kamkar, an independent security researcher, discusses his journey from hacking Counter-Strike and MySpace to creating hardware exploits like Roll Jam and MagSpoof. He details how he used off-the-shelf components like the Raspberry Pi, Teensy, and TI CC1101 to demonstrate vulnerabilities in drones, car key fobs, and credit card systems. Kamkar emphasizes the importance of open-source hardware and low-cost tools like the Yardstick One and Proxmark in making security research accessible, while highlighting the growing security risks of IoT devices.

  • The Amp Hour · 1h 13m

    An Interview with Trammell Hudson

    Trammell Hudson, a hardware and firmware security researcher, discusses his diverse projects including reverse engineering Canon cameras with Magic Lantern, discovering a time-of-check-time-of-use vulnerability in Intel Boot Guard, and building the SpySpy FPGA tool. He details his work on retro computing, such as vector display emulation and finding Easter eggs in Mac SE ROMs, as well as his security research on Puma robot arms and passive RFID tags. Hudson explains his philosophy on open-source firmware through projects like Linux Boot and Coreboot, emphasizing user control and security transparency.

  • The Amp Hour · 1h 04m

    New Life Skills with Joe Grand

    Joe Grand, a hardware hacker and engineer, discusses his recent work reverse engineering a Trezor cryptocurrency wallet to recover $2M, detailing the fault injection and glitching techniques used to extract private keys from STM32 microcontrollers. He reflects on his career, including the design of the JTAGulator and DEF CON badges, and explains how burnout and the pandemic led him to prioritize mental health, meditation, and selective, fun projects like the Pizza Compass. Grand emphasizes the importance of open-source security tools in helping engineers build more secure products and advocates for a community-focused approach to hardware hacking.

  • Embedded.fm · 1h 12m

    259: Calculators Changed My Life

    Brandon Wilson, a software developer and security consultant, discusses his decades-long journey of hacking Texas Instruments graphing calculators, starting from middle school. He details the technical evolution of TI's security measures, including the use of Z80 and Motorola 68K processors, flash unlock exploits, and the eventual factorization of 512-bit RSA signing keys by the community. Wilson also describes his reverse engineering of a limited-edition Sega Genesis game cartridge and his work on abusing USB protocols to jailbreak the PlayStation 3 and modify cheap USB flash drive firmware.

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.