4 ms·
I appreciate all the details they provide in the post. The $250k in lab gear is useful when initially discovering, exploiting and documenting attacks like this.
by BitBangingBytes 13d ago
I appreciate all the details they provide in the post. The $250k in lab gear is useful when initially discovering, exploiting and documenting attacks like this.
Definitely doable in a home lab for under $25k in equipment, likely under $10k.
Same as my replicating Colin O’Flynn’s BAM BAM attack on a MPC5566 chip, he used a ChipShouter ($5,000) and I used a PicoEMP ($50).
https://youtu.be/URmI1VVilek https://youtu.be/URmI1VVilek
- throwaway81523 13d agoNice, thanks. I had wondered whether the $250K in lab gear is something that a serious HW security lab would already have on hand, as opposed to specialized expenditure for just this attack. I mean I rode in a $250K(?) motor vehicle a few days ago (the #2 SF Muni bus towards the Marina) but I didn't have to spend a lot to ride it, since it was already deployed. Nobody had to go out and buy it.
- junofan 13d agoHah, our new ones are $1.3 million. https://www.sfmta.com/media/44081 https://www.sfmta.com/media/44081 Perhaps driven by restrictions on federal grants? https://media.api.sf.gov/documents/Briefing_Book_-_Muni_Funding_Working_Group_-_October_2024_1.pdf https://media.api.sf.gov/documents/Briefing_Book_-_Muni_Fund... Some cool tech. Wonder if we optioned the inductive charging system. https://www.gillig.com/buses/battery-electric/#1731934845437-6ff757cd-619a https://www.gillig.com/buses/battery-electric/#1731934845437...
- laurencerowe 12d agoWow. Equivalent ones built in England are around 1/3rd the price £350k = $470k. https://www.bbc.com/news/articles/cjq45vw3n4go https://www.bbc.com/news/articles/cjq45vw3n4go
- 1attice 11d agoYeah but I bet the steering wheel is on the wrong side. ;)
- SV_BubbleTime 13d agoI have an application on an SPC58 that I really want to know more about. But unfortunately; it’s a dual core with lockstep. So if it could be done; I think that automatically double-pluses the budget.
- BitBangingBytes 13d agoDon’t need lasers for that chip, it absolutely can be done with enough time and effort. Don’t let fancy language like lock-step dissuade you from trying. The people who configured that chip also have to have done their job perfectly or it might still have a way in!
- SV_BubbleTime 13d agoIt’s two power supplies, two cores, lockstep, and an HSM they hype up… I’m pretty sure I would need two emps and a high precision rig at the minimum.