4 ms·
Context: https://www.tarlogic.com/news/hidden-feature-esp32-chip-infect-ot-devices/ https://www.tarlogic.com/news/hidden-feature-esp32-chip-infe... Both HN dis
by raphman 2y ago
Context: https://www.tarlogic.com/news/hidden-feature-esp32-chip-infect-ot-devices/ https://www.tarlogic.com/news/hidden-feature-esp32-chip-infe...
Both HN discussion [1] and blogs [2] mentioned that it was a nothingburger.
tl;dr: there are undocumented debugging interfaces on the original ESP32 chip that can only be accessed by code running on the microcontroller or via another computer connected via the physical UART interface. No remote exploit possible. Espressif will now provide a patch to disable these debugging interfaces and document all yet-undocumented interfaces.
[1] https://news.ycombinator.com/item?id=43301369 https://news.ycombinator.com/item?id=43301369
[2] https://darkmentor.com/blog/esp32_non-backdoor/ https://darkmentor.com/blog/esp32_non-backdoor/