# 076 - Living In A Vast World of Craziness

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2025-09-29
- Length: 1h 00m
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness
- Listen: https://reverseengineering.libsyn.com/076-living-in-a-vast-world-of-craziness

## Summary

Dan Walters, founder of Bytetinker, discusses his work running the ISP hacking ward at CypherCon, focusing on the security vulnerabilities of DOCSIS cable infrastructure. He explains how default configurations in cable modems and CMTS units allow for unauthenticated access, enabling man-in-the-middle attacks, remote firmware updates, and data interception. Walters details the hardware and software tools required to build a private ISP lab, including CMTS units, RF testers, and reverse engineering tools like binwalk and JTAG programmers. He highlights the lack of encryption in legacy DOCSIS standards and the ease with which attackers can compromise network integrity.

## Chapters

- [0:28](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=28) Introduction: Dan Walters and CypherCon
- [2:32](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=152) Dan Walters' Background and Bytetinker
- [4:52](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=292) The ISP Hacking Ward at CypherCon
- [8:36](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=516) DOCSIS Protocols and Network Architecture
- [16:06](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=966) Modem Vulnerabilities and Unauthenticated Access
- [22:09](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=1329) Hardware Setup: CMTS, Routers, and Cellular
- [25:10](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=1510) DOCSIS Encryption Weaknesses and Backwards Compatibility
- [35:22](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=2122) Firmware Updates and Remote Device Control
- [43:09](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=2589) Reverse Engineering Tools and Methodology
- [50:04](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness#t=3004) Building a Private ISP Lab and Cost Analysis

## Topics

- [Wireless & RF](https://hardwarepodcasts.com/topic/wireless-and-rf)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Chips, FPGAs & semiconductors](https://hardwarepodcasts.com/topic/chips-and-fpgas)
- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Policy, trade & tariffs](https://hardwarepodcasts.com/topic/policy-trade-and-tariffs)

## Most relevant to

founders before launch

## Mentioned

- Bytetinker (company)
- CypherCon (other)
- DOCSIS (other)
- CMTS (product)
- binwalk (tool)
- JTAG (tool)
- QAM (other)

## Related episodes from other shows

- [149: Flamethrowers Aside](https://hardwarepodcasts.com/podcast/embedded-fm/2016-04-27-149-flamethrowers-aside) (Embedded.fm)
- [An Interview with Joe FitzPatrick](https://hardwarepodcasts.com/podcast/the-amp-hour/2017-06-05-an-interview-with-joe-fitzpatrick) (The Amp Hour)
- [Look at nature and meet nerds](https://hardwarepodcasts.com/podcast/the-amp-hour/2017-03-13-look-at-nature-and-meet-nerds) (The Amp Hour)
- [192: Button Connected To Nothing](https://hardwarepodcasts.com/podcast/embedded-fm/2017-03-22-192-button-connected-to-nothing) (Embedded.fm)
- [How to Discover & Handle IoT Firmware Vulnerabilities | Terry Dunlap, Co-Founder & CEO, ReFirm Labs | #IoTFounders E027](https://hardwarepodcasts.com/podcast/iot-for-all-podcast/2019-05-15-how-to-discover-handle-iot-firmware-vulnerabilities-terry-dunlap-co-founder-ceo) (IoT For All Podcast)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2025-09-29-076-living-in-a-vast-world-of-craziness. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.