Unnamed Reverse Engineering Podcast

Latest Episodes:

019 - It's Still Not Magic Apr 06, 2019

Show notes

This week, Holly Graceful (@HollyGraceful, gracefulsecurity.com) joined us to talk about her recent hardware reverse engineering blog series and her pen(etration) testing and security career in both public and private sectors. She tells us about how she entered the field via the military and some of those differences.

We discussed breaking down projects into smaller bites. We talk about why getting access to the JTAG (use it for...) port can be super easy in the consumer product and it may be more calculated than expected. The series ends with some key fob fun.

We do a minor round up of software defined radio and the USRP used with gnuradio. We catch up on what Alvaro is doing with his SDRs.

Holly is working on more posts so stay follow to be updated with the latest.

Links that came up:

Pulse view logic analyzer
Michael Ossmann (of Great Scott Gadgets) tutorials (one of many)
Cheap: Jtag on arduino, Black Magic Probe, CortexProg
Expensive: Jtagulator , Segger Jlink
Radio posts/tutorial- by Oona Räisänen @Windyoona (Website)

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

018 - Ghidra Mar 15, 2019

Show notes

Thomas Daede joined us after the Mountain View Reverse Engineering Meetup to talk about Ghidra. Ghidra is the NSA's newly-released-to-the-public software reverse engineering tool.

The source has not yet been released, but there's a Ghidra Github placeholder.

Some of the other things we talked about:

Thomas also mentioned @marcan42's example of comparing his own PowerPC code with Ghidra's decompiled output.

CrowdSupply's Teardown conference is coming up in Portland, June 21-23.

BlackHoodie will be back in the SF Bay Area in April.

Women in Security and Privacy (@wisporg) has a scholarship program for DEFCON. You can apply for the scholarship online. They'll cover the DEFCON ticket as well as a $500 stipend for travel/accommodation. If you want to help, you can donate here. Thanks to @RachelTobac for spreading the word! As of this episode, there are 58 scholarships available!

Jen mentioned @pinkflawd's tweet about ELF binaries.

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

017 - Supercon 2018 Part 2 Nov 11, 2018

Show notes

Jen and Alvaro were at the 2018 Hackaday Superconference!

Sorry for the audio quality, we recorded in a fairly loud environment.

Sarah Petkus and Mark Koch

Rick Altherr

Ruth Grace Wong & Joe Rozner

Piotr Esden & Dominc Spill

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

016 - Supercon 2018 Part 1 Nov 10, 2018

Show notes

Jen and Alvaro were at the 2018 Hackaday Superconference!

Sorry for the audio quality, we recorded in a fairly loud environment.

Chris Svec - http://chrissvec.com

SEGGER J-Link

Josh Lifton from Crowd Supply.

Richard Whitney from the Happy Robot Company

Hot air rework station

Alex Glow from Hackster

Chris Gammell from The Amp Hour

Contextual Electronics
Analog Discovery 2
Saleae
Jen and Alvaro were on Episode 363 of The Amp Hour

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

015 - Updates! Aug 30, 2018

Show notes

Alvaro was at Toorcamp and DEFCON. Chris from The Amp Hour and Jack from the Darknet Diaries podcast were also there.

Jen went to the Vintage Computer Festival

Alvaro and Jen will both be at the Hackaday Superconference this year. Call for papers is still open!!!

Hardware Developers Didactic Galactic and the Mountain View Reverse Engineering Meetup

A listener, David, wrote up his process for reverse engineering a robot cat litter box .

Alvaro's fridge reverse engineering twitter thread.

Bunnie Huang's book "Essential Guide to Electronics in Shenzhen"

Jen mentioned playing with IDA and the Hex-Rays Decompiler

Dmitri's CortexProg ARM SWD debugger/programmer.

KiwiCon

We have a mirror of PoC||GTFO on the website.

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

014 - Ferrycast Jul 10, 2018

Show notes

Alvaro and Gareth talked to Joe Grand on the ferry back from Toorcamp.

Here are links to most of the things we talked about:

If you're curious about Joe's "Juvenile Delinquency" days, check out his Cyphercon Talk!

Here's the photo out the window Alvaro mentioned.

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

013 - It's Not Magic Jul 04, 2018

Show notes

Alvaro, Gareth and Piotr talked to Schneider about Iridium satellite protocol reverse engineering. (And other fun things)

Here are links to most of the stuff we talked about. They're mostly in chronological order.

Iridium Satellite
CCCamp
HackRF
EasterHegg 2010
Openbeacon project
r0ket Badge
rad1o Badge
Check out Schneider's talks at CCC:
- Iridium Pager Hacking @ 31C3
- Iridium Update @ 32C3
- Iridium Satellite Hacking @ HOPE 2016
RTL-SDR
WebSDR
GNURadio
NumPy
Convolutional Codes
BCH Codes
Spitsbergen
Eccentric Orbits: The Iridium Story (Book)
Iridium Corporation
Iridium NEXT
Iridium Flares
Heavens Above Iridium Flares
Iridium Burst
Globalstar
"Bent-pipe" satellite
Monterey Bay Aquarium Wave Glider
TI Calypso DSP
Osmocom
Great Scott Gadgets
AIS (for ship tracking)
dAISy AIS Receivers (on Tindie)
MarineTraffic
tnt's Iridium Antenna:
- Eagle CAD File's
- OSHpark Shared Project
Gareth mentioned these tools:
- Awk
- Sed
- Grep
gr-iridium
Iridium-toolkit
Wireshark
muCCC
Michael Ossmann's great SDR tutorials
Inspectrum
Baudline
Fosphor

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

012 - Cheese vs. SDR Jun 29, 2018

Show notes

Alvaro and guest co-host Gareth(@gareth__) talked to Jared Boone(@sharebrained) about interactive television, blu-ray authoring, optical media, cheese, the HackRF portapack, and much more. Recorded during Toorcamp 2018.

Links to some of the things we talked about:

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

011 - Making Too Many Assumptions Jun 03, 2018

Show notes

This week Mike Ryan (@mpeg4codec) joins us to talk about how he went from hacking games for stronger characters (we don't reveal which ones; you'll have to listen) to revealing big weaknesses in Bluetooth products.

Mike gives us the rundown on how he ended up working on UbertOOth , using wireshark, and how many UbertEEth you should use. We discuss some of the biggest mistakes developers make in their Bluetooth and BLE products. He shares some examples of this through his prior work including credit cards and skateboards. We also learn about CVEs including the one Mike has for the Skateboard.

If after this, you are worried that your next IoT product needs a security review or at least getting started with Ubertooth, you can go to the Ubertooth , CrackLE and wireshark sites. If you want some serious hands on, you can contact Mike here.

A few more tools came up to add to your list:

Apk tool
Hci tool (1) (tutorial)
Perl
Jar signer
Gattool
Smali - https://github.com/JesusFreke/smali
Inspectrum

NOTE: Sorry about the rough audio, we had some technical difficulties that we resolved about 15 min in.

Have comments or suggestions for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

010 - T0015! Part 0x3 - Debug Interfaces May 15, 2018

Show notes

This week we talk about the nebulous world of debugging interfaces, some of their history, and how they can be used in reverse engineering. We cover the basics of what are JTAG and SWD ( both ARM Debug Access Port (DAP) and ARM® Debug Interface Architecture Specification) and can they both be used to debug a MIPS processor (the answer is NO!).

We list a few other standards but also some key vendors and projects to get you debugging and controlling your next system:

Segger J-Link/J-Trace (generally the most flexible)
BlackMagicProbe
ST-Link
BusBlaster
JTAGulator
Cypress Miniprog3
Microchips supports both AVR and Microchip parts for debug.

Since a few of these are from the OSHW/OSSW world, we briefly discuss the impact of this work on driving down costs and opening up the field to more people.

As always, we might have missed your favorite tool or you had questions and comments about our list, find us on twitter @unnamed_show, or email us at show@unnamedre.com and tell us.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

Our TOPPODCAST Picks

Follow Us

Stay Connected

Unnamed Reverse Engineering Podcast

Related Podcasts

Links

Stay Connected