Hardware Podcasts

074 - This Coconut Won't Open

Unnamed Reverse Engineering Podcast · 6 May 2025 · 1h 05m

What this episode covers

Noah Holland and Joshua Stiebel, from the Michigan Tech Red Team, discuss their reverse engineering of Dormakaba's SafeLock electronic access control systems. They detail how they discovered vulnerabilities in the MyFare Classic and Ultralight card formats, allowing them to clone keys and generate master keys using tools like the Proxmark3 and Flipper Zero. The conversation covers the limitations of Dormakaba's patching efforts, the importance of per-site AES keys, and the value of consulting old patents for protocol documentation.

Most relevant to

makers and hobbyists

Topics

Mentioned

Companies
Dormakaba, Michigan Tech Red Team
Products
SafeLock
Tools
Proxmark3, Flipper Zero, Chameleon Ultra, NMAP
Also
CypherCon, Secretcon, DEFCON

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 06m

    519: The Password Is All Zeros

    Mark Omo and James Rowley from Marcus Engineering discuss their research into SECURAM safe locks, revealing that the ProLogic series contains critical security flaws, including a debug port password set to all zeros and codes stored on the external keypad. They detail two exploits, 'code snatch' and 'reset heist,' which allow unauthorized access to safes used for pharmaceuticals and cash, despite UL high-security certification. The conversation covers the ethical and legal challenges of responsible disclosure, including threats from SECURAM's legal team and support from the EFF's Coders' Rights Project.

    Security & privacyDebugging & failure analysis
    8 chapters

  • Hackaday Podcast · 1h 07m

    Ep 182: Sparkpunk Photography, Anti-Xiomi Air Filters, and Keyfob Foibles

    Hackaday editors Elliot Williams and Tom Nardi discuss the rapid sell-out of Supercon tickets, the John Deere tractor hack at DEFCON, and a critical 'rollback' vulnerability in car key fobs that allows permanent unauthorized access. They also cover the debate over 3D CAD file formats (STEP vs. STL), a DIY magnetron sputtering rig for making daguerreotypes, and software for home PCB production using SLA printers. The episode concludes with a look at a Game Boy flashcart, Starlink ground station hacking, and a deep dive into obsolete Scenix microcontrollers by Al Williams.

    Security & privacyPCB design & layout
    10 chapters

  • Hackaday Podcast · 57m

    Ep082: DJ CNC, NFC Black Box, Sound of Keys, and Payin' for 3D Prints

    Hackaday editors Mike Szczys and Elliot Williams review several hardware hacks, including Paul McClay's DJ CNC, which repurposes CD-ROM stepper motors and a Dremel to mill acrylic by mounting the tool horizontally. They also discuss a security research project by Sundaria, Ramesh, Harini, Ramprasad, and Jun Han that reverse-engineers house keys from the sound of pins clicking in a lock, and Christopher Wade's DEF CON talk on breaking proprietary NFC firmware in smartphones. Finally, they highlight a cardboard RC car built by the Kryser channel and a starburst display by mangy dog using laser-cut acrylic and UV resin.

    Mechanical engineeringSecurity & privacy
    10 chapters

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

    Security & privacyDebugging & failure analysis
    7 chapters

  • The Amp Hour · 1h 23m

    An Interview with Samy Kamkar

    Samy Kamkar, an independent security researcher, discusses his journey from hacking Counter-Strike and MySpace to creating hardware exploits like Roll Jam and MagSpoof. He details how he used off-the-shelf components like the Raspberry Pi, Teensy, and TI CC1101 to demonstrate vulnerabilities in drones, car key fobs, and credit card systems. Kamkar emphasizes the importance of open-source hardware and low-cost tools like the Yardstick One and Proxmark in making security research accessible, while highlighting the growing security risks of IoT devices.

    Security & privacyWireless & RF
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.