3 ms·

I've long wished for a Cyanogenmod (LineageOS) for Garmin But without source that can't ever happen I guess. Also I think they encrypt firmware after the 5 se

by ck2 4y ago

I've long wished for a Cyanogenmod (LineageOS) for Garmin But without source that can't ever happen I guess. Also I think they encrypt firmware after the 5 series in the Fenix 6/7 models Coros has proved it is possible to use cheap hardware to make clones but their metrics are supposedly nowhere near as good as the Firstbeat algorithms.

depierre 4y ago
Author here. They did start encrypting the firmware of their latest devices. I noted that the firmware images for Forerunner 55, 945 and 955 were encrypted. Most likely others are as well. In the live demo I did at Hack in the Box a couple of days ago (slides available [0]) I've shown how to exploit one of the vulnerabilities to read the memory of the Forerunner 55, making it possible to dump the firmware unencrypted. The CIQ demo app is also on our GitHub repo [1]. [0]: https://conference.hitb.org/hitbsecconf2023ams/materials/D2T1%20-%20A%20Deep%20Dive%20into%20GarminOS%20and%20its%20MonkeyC%20Virtual%20Machine%20-%20Tao%20Sauvage.pdf https://conference.hitb.org/hitbsecconf2023ams/materials/D2T... [1]: https://github.com/anvilsecure/garmin-ciq-app-research/tree/main/demo https://github.com/anvilsecure/garmin-ciq-app-research/tree/...