4 ms·
Wow, didn’t know EFF went so deep on investigations like this. Top notch!
by revicon 5y ago
Wow, didn’t know EFF went so deep on investigations like this. Top notch!
- dmitrygr 5y agoThis is not really deep, TBH. This is 5-6 minutes of work for someone who does this habitually. They didn't even dump the firmware of the PIC running in there to share it for some fun RE.
- hoseja 5y agoYes, the writeup sounded very amateurish.
- kragen 5y agoYeah, it's hard to believe that this is the same organization founded by John Gilmore, who wrote significant parts of GCC and GDB. I don't know how they're going to protect our rights on the electronic frontier if they don't even know when you need to connect your grounds together.
- kortex 5y agoThe reporter clearly does not do this habitually, as it took them several (frustrating, from the sound of it) days to figure out what they did. Sounds like it was in large part a learning experience for them.
- Mo3 5y agoI mean, the author even stated clearly that it was a great learning experience and that the EFF couldn't do this for everything. So all of this discussion is somewhat redundant
- more_corn 5y agoYou should reach out and give them some pointers for next time.
- bragr 5y agoGotta agree with you there. "Connect to the UART, remember UART requires a ground, throw some AT commands at it, give up, and ask the company about a serial number" hardly seems like a deep dive.
- smilespray 5y agoIn fairness, expectations are a bit high around these parts. Maybe this article wasn't written for us. What would be enough? Decapping all chips, dumping and decompiling the firmware, figuring out what the people who made the device had for breakfast?