3 ms·

The question for me is why they choose to destroy some chips and not others. I could guess about what makes a chip destroy worthy and another chip not destroy w

The question for me is why they choose to destroy some chips and not others. I could guess about what makes a chip destroy worthy and another chip not destroy worthy, but I'd like some groundtruth.

dfox 12y ago
It would be useful to have entire list of what they have destroyed, but these three listed components are: keyboard controller - random chinese ASIC that probably contains MCS51 core and some kind of non-volatile memory (with no meaningful way to ascertain whether it is flash or mask ROM) => it is data storage device "trackpad controller" - actually serial flash that trackpad controllers apparently boots from => data storage device "inverting controller" (seriously, wtf? :)) - simple analog chip which probably contains <1k transistors, but it's datasheet says it is "programmable" (by means of few external resistors, so it does not actually store any data), and was probably destroyed in order to destroy everything that stores data or is "programmable".
- Create 12y ago
  (seriously, wtf? :)) https://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.html#Miller https://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.ht...
  - dfox 12y ago
    My point in this case is that LT3957 does not even contain any embedded firmware. There even is a block diagram in it's datasheet that consists of few opamps, about 20 logic gates and few blackboxes that does not do anything complex (I assume that each such blackbox is not more than about 20 transistors). [edit: the "seriously, wtf?" comment has to do with naming it "inverting controller", not with it's destruction]
- rasz_pl 12y ago
  It doesnt need any firmware or storage to be dangerous. Remember TAO mail order spy gadgets catalog. Keyboard controller can be made to leak RF. Same for touch. Inverter is close to lvds signals, could probably be made to leak picture over FR. If anything GCHQ targeted THEIR OWN assets.
vilda 12y ago
Anything that may be a general-compute device.
rcxdude 12y ago
I think the best explanation is that they just destroyed one chip on each PCB, maybe more on larger PCBs. If your goal is to make the device non-operational that's not a bad approach.

The question for me is why they choose to destroy some chips and not others. I could guess about what makes a chip destroy worthy and another chip not destroy worthy, but I'd like some groundtruth.

dfox 12y ago

It would be useful to have entire list of what they have destroyed, but these three listed components are: keyboard controller - random chinese ASIC that probably contains MCS51 core and some kind of non-volatile memory (with no meaningful way to ascertain whether it is flash or mask ROM) => it is data storage device "trackpad controller" - actually serial flash that trackpad controllers apparently boots from => data storage device "inverting controller" (seriously, wtf? :)) - simple analog chip which probably contains <1k transistors, but it's datasheet says it is "programmable" (by means of few external resistors, so it does not actually store any data), and was probably destroyed in order to destroy everything that stores data or is "programmable".

Create 12y ago
(seriously, wtf? :)) https://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.html#Miller https://www.blackhat.com/html/bh-us-11/bh-us-11-briefings.ht...
- dfox 12y ago
  My point in this case is that LT3957 does not even contain any embedded firmware. There even is a block diagram in it's datasheet that consists of few opamps, about 20 logic gates and few blackboxes that does not do anything complex (I assume that each such blackbox is not more than about 20 transistors). [edit: the "seriously, wtf?" comment has to do with naming it "inverting controller", not with it's destruction]
rasz_pl 12y ago
It doesnt need any firmware or storage to be dangerous. Remember TAO mail order spy gadgets catalog. Keyboard controller can be made to leak RF. Same for touch. Inverter is close to lvds signals, could probably be made to leak picture over FR. If anything GCHQ targeted THEIR OWN assets.

vilda 12y ago

Anything that may be a general-compute device.

rcxdude 12y ago

I think the best explanation is that they just destroyed one chip on each PCB, maybe more on larger PCBs. If your goal is to make the device non-operational that's not a bad approach.