Unnamed Reverse Engineering Podcast

Latest Episodes:

009 - T0015! Part 0x2: All Ur sigs R belong to uS. Apr 15, 2018

Show notes

In this episode, we talked about measuring things (Well mostly digital and some analog things)!

Digital Multimeter
Oscilloscope
- Passive vs active probes
- Current probes
Logic Analyzers
- Saleae Logic
- 1. Mentioned on the Embedded.fm podcast Episode 2
  2. Now with Real Time View!
- Analog Discovery 2
- Sigrok (Supported Logic Analyzers)
- Bitscope
- BusPirate

Perhaps we missed your favorite tool or you had questions and comments about our list, find us on twitter @unnamed_show, or email us at show@unnamedre.com and tell us.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

008 - T0015! Part 0x1 Mar 09, 2018

Show notes

This week are we talking about tools to get you through different situations. Both of share our list of items to tackle a few common situations. By no means is this extensive but it doesn't focus exclusively on software.

Program extraction - Debuggers/Programmers/Readers
- Segger J-Link/J-Trace
- BlackMagicProbe
- ST-Link
- BusBlaster
- JTAGulator
- TL866 Universal Programmer
Decoding the data - Binary Analysis tools (Yes, there is more than just IDA)
- IDA (Pro) with or without decompiler
- Binary Ninja
- Radare 2
- BinVis
Real-time binary analysis - Debugging SW
- JLink/Ozone
- gdb/kdb/lldb
- openOCD
- SoftICE
- MASM
Listening to the hardware - Signal Analysis/Generation
- Saleae Logic
- Analog Discovery 2
- Oscilloscope
- BusPirate
- GreatFET/GoodFET
- USBeagle USB Analyzer and other devices AArdvark/Cheetah i2c/spi
- Bitscope
- LT SPICE
- Digital Multi-Meter
- USB Descriptor Dumper
Listening from afar - SDR/Wireless Hardware
- FCC-ID search
- RTL-SDR
- HackRF
- BladeRF
- Ettus Research USRP
- Ubertooth One
- Yardstick One
- ChipWhisperer
- Frontline Sodera BLE analyzer
Even more SDR Software
- GNURadio
- Inspectrum
Hardware handling tools
- Microscopes
- Z-axis tape
- Soldering iron or SMD rework station with air gun
General Tools
- BeyondCompare
- Lab notebooks
- Search for the chips using:
- 1. Octopart
  2. S-manuals

Perhaps we missed your favorite tool or you had questions and comments about our list, find us on twitter @unnamed_show, or email us at show@unnamedre.com and tell us.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

007 - Candy Coated Jan 03, 2018

Show notes

M. Carlton joined us to talk about being part of leading professional reverse engineering team at Senr.io. We discussed her Embedded Systems talk about IoT and in particular Devil's Ivy (Check out the important ROP video to better understand the key concept ). In this particular case, they found that the M300 camera model using GSOAP (SOAP) parse for buffer overflow.

Not only did this issue allow spread quickly as a DOS among the M300 cameras but over 200 other Axis cameras (Hurray for code-reuse) due to using the third party code library.

M. uses several tools in her work:

IDA Pro
Binwalk
Nmap
Debuggers like gdb
Multimeters and oscilloscopes
VMWare

She had some excellent suggestions for improving the odds of NOT getting hacked:

Put a password on any consoles and let it be changeable.
Anticipate issues by performing security reviews.
Be wary of any third party libraries you use. If there are updates to these libraries, prepare to update quickly.
Make sure your systems are field patchable/updateable, securely.
Limit surface area. Limit the ability for others to analyze your system by removing/disabling consoles, UARTs, features, and JTAG interfaces.
Put more gates/obstacles on how easily any found exploits can be used in the system.
Unearth any default credentials used in your system and resolve.

In the worse case, plan in advance for a security breach to expedite deployment.

Have comments or suggestion names for us? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

006 - Marketing Via Stickers Dec 06, 2017

Show notes

A quick year end update and feedback show from just the hosts.

We cover the Hackaday Superconference where we handed out stickers (track us down to get one of the last few). Key highlights that Alvaro missed first hand were:

Michael Ossmann and Dominic Spill on IR RE
Samy Kamkar talked about car remote RE
See many more talks here
Spotify playlist from the conference.

We talked briefly about the ask for resources for getting started on the hardware side. If you have suggestions to share, email us!

In the meanwhile Mountain view reverse engineering meetup is happening December 12th in the new location.

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or email us at show@unnamedre.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

005 - Circuits That Go Nowhere Nov 06, 2017

Show notes

This week we were joined by the incredible IC reverse engineer, Ken Shirriff. You may know him from his Hack A Day Super Conference talk in 2016 or his blog's many posts (Counterfeit chips, ARM 1 chip, and Sinclair Calculator). We covered quite a number of restorations (Visual6502 project, 8008 microprocessor - Ken's restoration details)

He is currently working the Xerox Alto Restoration and we talked not only about the hardware but the microcode and software restoration. Software languages we touched on were the C predecessor, BCPL and object oriented language Smalltalk. There are number of resources out there restoring and archiving computing history:

Computer History Museum has some of the mylar chip mask from the old process we discussed.
Living Computer Museum in Seattle has also collaborated and done some impressive work.
Siliconpr0n is John McMaster's site for IC reverse engineering and more.
http://www.bitsavers.org - Living archive for schematics, software, etc… on any number of electronics items.

Resources for getting started with analog circuits at transistor level:

"Microelectronics Circuits" Sedra and Smith (covers all your favorite circuits like current mirroring)
Start with die photos… analyzing is much smaller and easier
When finally working hands on cheap acids for consumer hobbyists (aka glass etchers) also work on ICs to remove layers
LTSpice (circuit simulator and product that gives Jen college-aged anxiety)

HackaDay Superconference coming up. Everyone on the show (here and here) have spoke at this conference. Ken and Alvaro will be there!

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or hit us up at on the comment form. If you still cannot find us, goto http://unnamedre.com

004 - 0x0FF the Rails Oct 13, 2017

Show notes

We spoke with Micah Scott (@scanlime), the original inspiration for this podcast. She gave us a rundown of her past and current projects which run the gamut of consumer toys, art installations, and telling a story through technology exploration. Her past projects include coastemelt, Wacom tablet, and Fadecandy.

We also talked about her challenges on Sifteo with limited architectures and resources. We tackled some basic computer architecture types.

The latest project is Winchbot where viewers can watch Tuco and the other kitties. Micah broke down reverse engineering the gimbal motors with Sigrok. We swapped favorite tools (ipython) and Jen lost a bet. You can follow Micah along on her YouTube channel and support her on Patreon.

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or hit us up at on the comment form. If you still cannot find us, goto http://unnamedre.com

You can find Jen on twitter @rebelbotjen and http://rebelbot.com as well as Alvaro (who was on Embedded.fm) on twitter @alvaroprieto and http://alvarop.com.

Music by TeknoAxe (http://www.youtube.com/user/teknoaxe)

003 - Barbies and Keyboards Sep 17, 2017

Show notes

In this episode, Jen and Alvaro talk about some current events and some basic reverse engineering projects they've worked on.

Some of the topics covered were:

Radiolab episode

Vintage computer festival where Jen found @foone for all your floppy needs.

Reverse Engineering PCB's with a synchrotron

Alvaro's Keyboard Reverse Engineering project but more information on HID USB is on this page including tools and values sent to keyboard data.

Jen's Hello Barbie project link> but also Digital Dress Barbie (Barbie's first wearable!). Jen used the TL866A USB Universal Minipro Programmer

Somerset Recon Barbie RE

http://binvis.io/

What is ABI? Get caught up here.

Getting started with Reverse Engineering? Checkout https://challenges.re/

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or hit us up at on the comment form.

002 - Cheap And Easy Aug 30, 2017

Show notes

In this episode, Jen and Alvaro chat with Dmitry Grinberg (http://dmitry.gr).

Some of the things we talked about:

Learning to program at 9 years old, then selling TI-83/89 calculator and Palm OS programs.
Reverse engineering PalmOS to write the first SDHC driver for it.
Reverse engineering the SEGA VMU and writing a Cortex-M23 emulator for it.
- Maple Bus
- Saleae Logic 16
- LVDS
- IDA Pro
- Cortex-M23
Running Linux on an 8-bit Micro
PSoC Reverse Engineering
ARM SWD Protocol

Here's a photo of Jen's Dreamcast, controller, and VMU.

We had some slight technical issues with our microphone halfway through the podcast. Luckily the backup was working, but doesn't sound quite as good :(

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or hit us up at on the comment form.

You can find Jen on twitter @rebelbotjen and http://rebelbot.com as well as Alvaro on twitter @alvaroprieto and http://alvarop.com.

001 - Success! Aug 15, 2017

Show notes

In this episode, Jen and Alvaro talk about their new, yet to be named, Reverse Engineering Podcast.

Some of the links we talked about through the show:

@scanlime's awesome reverse engineering stuff.

MTVRE Meetup

Halt and Catch Fire

Security conferences: DEFCON , blackhat, REcon

"Hardware/mechanical" reverse engineering example: Auto-syphon reverse engineering

Boost Converter with Water

Ethereal/Wireshark packet analyzer.

Alvaro's apgForm php script.

Ken Shirriff's great blog.

Various places to buy components in the SF Bay Area: Fry's, HSC Surplus, Weird Stuff Warehouse, JameCo, and Evil Mad Scientist Labs

Next episode will be with guest Dmitry Grinberg! http://dmitry.gr/

Have comments or suggested names for the show? Find us on twitter @unnamed_show, or hit us up at on the comment form.

You can find Jen on twitter @rebelbotjen and http://rebelbot.com as well as Alvaro on twitter @alvaroprieto and http://alvarop.com.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Unnamed Reverse Engineering Podcast

Related Podcasts

Links

Stay Connected