Tweet
Title: Hardware hacking 101: There is plenty of room at the bottom
Description:
This is a live demonstration of hacking into the processor embedded in an SD card, effectively turning the device into a potentially covert Raspberry Pi-class computer under your complete control. The ARM926EJ-S ARM processor made its appearance as the embedded CPU in Transcend’s WiFi-enabled SD cards, clocking in at an impressive 426 BogoMips – we can’t possibly leave that territory unexplored, can we?
In this session we root the card’s own CPU, install a more featureful OS, and explore the system’s common and unusual capabilities (in hardware AES encryption and native support for Java bytecode among them). These provide plenty of building blocks for our projects.
Clearly, complete control of such a hidden computer running with full network connectivity can be used in network penetration scenarios. We’ll discuss applicable security threat countermeasures.
There is plenty of room at the bottom, and opening these computer-within-the computer configurations create interesting miniaturized automation scenarios alongside the obvious, more ominous security aspects.
Use your newfound knowledge for good, with great power comes great responsibility!
=====
#hhv-hw101-talk-qa-text: https://discord.com/channels/7082082...55105479704636
Twitch: https://twitch.tv/dchhv
Speaker(s): Federico Lucifredi
Location: Hardware Hacking / Soldering Skills Vlg / Hardware Hacking Vlg
Discord: https://discord.com/channels/7082082...28536149786665
Event starts: 2020-08-07 11:00 (11:00 AM) PDT (UTC -07:00)
Event ends: 2020-08-07 12:00 (12:00 PM) PDT (UTC -07:00)
For the most up-to-date information, please either visit https://info.defcon.org, or use HackerTracker, which is available for iOS and Android. This is an automated message, and this data was last modified 2020-08-06T20:25 (UTC).
Description:
This is a live demonstration of hacking into the processor embedded in an SD card, effectively turning the device into a potentially covert Raspberry Pi-class computer under your complete control. The ARM926EJ-S ARM processor made its appearance as the embedded CPU in Transcend’s WiFi-enabled SD cards, clocking in at an impressive 426 BogoMips – we can’t possibly leave that territory unexplored, can we?
In this session we root the card’s own CPU, install a more featureful OS, and explore the system’s common and unusual capabilities (in hardware AES encryption and native support for Java bytecode among them). These provide plenty of building blocks for our projects.
Clearly, complete control of such a hidden computer running with full network connectivity can be used in network penetration scenarios. We’ll discuss applicable security threat countermeasures.
There is plenty of room at the bottom, and opening these computer-within-the computer configurations create interesting miniaturized automation scenarios alongside the obvious, more ominous security aspects.
Use your newfound knowledge for good, with great power comes great responsibility!
=====
#hhv-hw101-talk-qa-text: https://discord.com/channels/7082082...55105479704636
Twitch: https://twitch.tv/dchhv
Speaker(s): Federico Lucifredi
Location: Hardware Hacking / Soldering Skills Vlg / Hardware Hacking Vlg
Discord: https://discord.com/channels/7082082...28536149786665
Event starts: 2020-08-07 11:00 (11:00 AM) PDT (UTC -07:00)
Event ends: 2020-08-07 12:00 (12:00 PM) PDT (UTC -07:00)
For the most up-to-date information, please either visit https://info.defcon.org, or use HackerTracker, which is available for iOS and Android. This is an automated message, and this data was last modified 2020-08-06T20:25 (UTC).