Transcript for video (not sure if this is appropriate for here, please advise if not, but I thought it would be useful to read alongside the video) Chris Tarno

Transcript for video (not sure if this is appropriate for here, please advise if not, but I thought it would be useful to read alongside the video) Chris Tarnovsky Hired by satellite TV industry Works independently in a San Diego lab Remove metal smart card Expose to acids Remove white epoxy Plastic breaks down after 10 minutes Acetone in two beakers Fuming nitric acid HNO3 applied to chip Rinsed in one acetone beaker Transferred to second "clean" beaker Scrape off the surface Ultrasound cleans off remaining residue Checks chip is clean using microscope attached to a computer screen Puts chip back in the credit card sized smartcard holder Chip is made up of two layers with a third layer as a security layer on top Need to burn a hole through the top layer to reach metal on the second layer Hole is made using a mask (nail polish?) Mask is left to dry Micropositioner holds a sewing type needle to scratch a hole Want to scratch a middle area where the databus is and a control line on the side Leave the needle where it is and remove from under the microscrope Drop of hydrofluoric acid (in "Rust Stain Remover" bottle) for 30 seconds Hydrofluoric acid is resistant to nail polish and magic marker Rinsed in water Then check how deep the acid etched under a microscope Repeat etching using 15 seconds (rate of etching increases with volume of acid and temperature) Rince in acetone Using UV light expose the lines of the chip (under microscope) Sit on the data bus with the needle. Yellow line (on oscilloscope) is what the needle is touching. Blue line represents Chris resetting the card. Build a log of what the chip does when it powers up 800 hexadecimal samples Can send management message to the chip and see what is done to decrypt it Can do anything at this point: read EEPROM, ROM