# 074 - This Coconut Won't Open

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2025-05-06
- Length: 1h 05m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open
- Listen: https://unnamedre.com/episode/74

## Summary

Noah Holland and Joshua Stiebel, from the Michigan Tech Red Team, discuss their reverse engineering of Dormakaba's SafeLock electronic access control systems. They detail how they discovered vulnerabilities in the MyFare Classic and Ultralight card formats, allowing them to clone keys and generate master keys using tools like the Proxmark3 and Flipper Zero. The conversation covers the limitations of Dormakaba's patching efforts, the importance of per-site AES keys, and the value of consulting old patents for protocol documentation.

## Chapters

- [0:29](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=29) Introduction and Background
- [5:16](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=316) Origins in CTFs and Linux Clubs
- [11:05](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=665) SafeLock Vulnerabilities and Exploits
- [14:23](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=863) Tools: Proxmark3, Flipper Zero, and Chameleon Ultra
- [17:22](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=1042) Dormakaba's Patching and Security Flaws
- [43:16](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=2596) Patents as a Reverse Engineering Resource
- [47:04](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=2824) Open Source Security and Industry Practices
- [51:45](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open#t=3105) Education and Future Goals

## Topics

- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Sensors & measurement in products](https://hardwarepodcasts.com/topic/sensors)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Intellectual property](https://hardwarepodcasts.com/topic/intellectual-property)
- [Careers & education](https://hardwarepodcasts.com/topic/engineering-careers-and-education)

## Most relevant to

makers and hobbyists

## Mentioned

- Dormakaba (company)
- SafeLock (product)
- Proxmark3 (tool)
- Flipper Zero (tool)
- Chameleon Ultra (tool)
- Michigan Tech Red Team (company)
- CypherCon (other)
- Secretcon (other)
- DEFCON (other)
- NMAP (tool)

## Related episodes from other shows

- [519: The Password Is All Zeros](https://hardwarepodcasts.com/podcast/embedded-fm/2026-01-23-519-the-password-is-all-zeros) (Embedded.fm)
- [Ep 182: Sparkpunk Photography, Anti-Xiomi Air Filters, and Keyfob Foibles](https://hardwarepodcasts.com/podcast/hackaday-podcast/2022-08-19-ep-182-sparkpunk-photography-anti-xiomi-air-filters-and-keyfob-foibles) (Hackaday Podcast)
- [Ep082: DJ CNC, NFC Black Box, Sound of Keys, and Payin' for 3D Prints](https://hardwarepodcasts.com/podcast/hackaday-podcast/2020-08-28-ep082-dj-cnc-nfc-black-box-sound-of-keys-and-payin-for-3d-prints) (Hackaday Podcast)
- [Hardware Security with Matt Brown](https://hardwarepodcasts.com/podcast/the-amp-hour/2025-07-17-hardware-security-with-matt-brown) (The Amp Hour)
- [An Interview with Samy Kamkar](https://hardwarepodcasts.com/podcast/the-amp-hour/2016-07-22-an-interview-with-samy-kamkar) (The Amp Hour)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-05-06-074-this-coconut-wont-open. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.