Hardware Podcasts

076 - Living In A Vast World of Craziness

Unnamed Reverse Engineering Podcast · 29 Sept 2025 · 1h 00m

What this episode covers

Dan Walters, founder of Bytetinker, discusses his work running the ISP hacking ward at CypherCon, focusing on the security vulnerabilities of DOCSIS cable infrastructure. He explains how default configurations in cable modems and CMTS units allow for unauthenticated access, enabling man-in-the-middle attacks, remote firmware updates, and data interception. Walters details the hardware and software tools required to build a private ISP lab, including CMTS units, RF testers, and reverse engineering tools like binwalk and JTAG programmers. He highlights the lack of encryption in legacy DOCSIS standards and the ease with which attackers can compromise network integrity.

Most relevant to

founders before launch

Topics

Mentioned

Companies
Bytetinker
Products
CMTS
Tools
binwalk, JTAG
Also
CypherCon, DOCSIS, QAM

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 05m

    149: Flamethrowers Aside

    Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

    Security & privacyEmbedded firmware
    10 chapters

  • The Amp Hour · 1h 06m

    An Interview with Joe FitzPatrick

    Joe Fitzpatrick of SecurityHardware.com, a former CPU silicon security tester, explains how hardware vulnerabilities arise from Verilog assumptions and undocumented register behaviors, leading to his current focus on hardware security training. He details the evolution of attacks from simple JTAG access to sophisticated USB-C exploits involving microcontrollers in adapters, and discusses the NSA Playset's Slot Screamer device. Fitzpatrick argues that physical access often bypasses software security, highlighting the risks of unverified hardware like YubiKey clones and the ethical dilemmas of vulnerability disclosure in IoT and medical devices.

    Security & privacyEmbedded firmware
    8 chapters

  • The Amp Hour · 1h 01m

    Look at nature and meet nerds

    Dave Jones of EEVblog and Chris Gammell of Contextual Electronics discuss their upcoming in-person meeting in Australia and New Zealand, highlighting plans for maker meetups and tech tours. Jones details his firmware hack of the Keysight 1000X-Series oscilloscope to unlock higher bandwidth and sample rates, while also noting a footprint error in his Mixy Tube clock project. The conversation shifts to industry news, including the CIA's Vault 7 leaks, the use of silicon carbide electronics for Venus landers, and the security risks of IoT devices like the Cloud Pet teddy bear.

    PCB design & layoutEmbedded firmware
    7 chapters

  • Embedded.fm · 1h 13m

    192: Button Connected To Nothing

    Terry Dunlap, founder and CEO of Tactical Network Solutions, discusses the critical lack of security in Internet of Things (IoT) devices, citing the Mirai botnet, the TrendNet FTC lawsuit, and the St. Jude Medical defibrillator alert as key examples of failure. He explains that common vulnerabilities stem from insecure coding practices, such as buffer overflows and hardcoded keys, often exacerbated by outsourcing firmware development without source code visibility. Dunlap highlights the emergence of standards like UL 2900 and the work of organizations like CableLabs to enforce firmware evaluation, while noting that consumers often remain vulnerable due to poor router configurations and a lack of firmware update support. He advises manufacturers to implement secure coding practices, use source code auditing tools, and encrypt firmware images to reduce the attack surface before devices reach the field.

    Security & privacyEmbedded firmware
    11 chapters

  • IoT For All Podcast · 59m

    How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027

    Terry Dunlap, Co-Founder & CEO of ReFirm Labs, explains how his background in offensive cyber operations at the NSA led to the creation of a platform for proactive IoT firmware security. He details the discovery of hard-coded credentials in IoT devices that enabled the Mirai botnet and discusses how low-cost manufacturers often ignore security until faced with legal liability. Dunlap highlights ReFirm Labs' work with telecom providers like AT&T and Charter to vet firmware before deployment, and explores emerging markets like cyber insurance and automotive security, including a demonstration of vulnerabilities in an OBD-II dongle.

    Security & privacyEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Unnamed Reverse Engineering Podcast. The episode itself belongs to its publisher.