3 ms·

If their goal was to get espressif to explain undocumented functionality they reached it. And espressif should have closed that gap without external pressure.

• mort96 2y ago
  If the researchers had written articles and held talks about undocumented HCI commands to gain direct access to the chip, and hammered on the security impact of having such undocumented commands, they could've probably achieved the same thing without resorting to lying.
• close04 2y ago
  > Researchers Miguel Tarascó Acuña and Antonio Vázquez Blanco of Tarlogic Security, who presented their findings yesterday at RootedCON in Madrid. > "Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices I'd like to believe the didn't have ulterior reasons to cry "backdoor" knowing that's not the case. That would be a huge indictment of the researchers' characters. They wanted the spotlight and calling something a "backdoor in a chip used by a billion devices" does the job.
• ChrisRR 2y ago
  I think their real goal was to gain customers for their security research business
• ExoticPearTree 2y ago
  > And espressif should have closed that gap without external pressure. There is a possibility it did not cross their minds that those instructions could an issue. In their blog post they were very open about what does commands do and it looks like some of their clients that do advanced things with their chips are also aware of the instructions. Probably the idea that the company is Chinese was enough to not bother asking the manufacturer for documentation about the instructions.