BitBangingBytes

4 ms·

1. 1.▲
   by BitBangingBytes 8d ago

   Don’t need lasers for that chip, it absolutely can be done with enough time and effort. Don’t let fancy language like lock-step dissuade you from trying. The people who configured that chip also have to have done their job perfectly or it m
2. 2.▲
   by BitBangingBytes 9d ago

   I appreciate all the details they provide in the post. The $250k in lab gear is useful when initially discovering, exploiting and documenting attacks like this. Definitely doable in a home lab for under $25k in equipment, likely under $10k.
3. 3.▲
   by BitBangingBytes 1y ago

   I used this to EMP pulse a locked processor to gain access and extract flash memory from it. Gave a talk at hardwear.io this year on it. YouTube live stream here: https://youtube.com/live/0tkdst3JE0g
4. 4.▲
   by BitBangingBytes 1y ago

   Have you published anything about this anywhere? I also had to work on the SLEIGH file for the M16C. Overall it just seemed like the processor definition for Ghidra needed more work.
5. 5.▲
   by BitBangingBytes 1y ago

   I don’t know if it was autocorrected or what, but it was SAM when I hit submit. Edit: seems I could fix it, thanks!
6. 6.▲
   by BitBangingBytes 1y ago

   The glitch has to happen within the window shown to you by the microcontroller. It seems to be in a different location for each microcontroller evaluated. The fact that it shows you where depending on which processor you’re attacking is pre
7. 7.▲
   by BitBangingBytes 1y ago

   All decoupling caps were removed so the voltage fault injection could have maximum effect.
8. 8.▲
   Zero Day in Microchip SAM Microcontrollers(wiki.recessim.com)

   74 points by BitBangingBytes 1y ago|20 comments
9. 9.▲
   Reverse Engineering News(youtube.com)

   2 points by BitBangingBytes 3y ago|1 comments
10. 10.▲
    by BitBangingBytes 3y ago

    Starting a Reverse Engineering Weekly News Show, second week. All feedback is welcome!
11. 11.▲
    Voltage Glitching Smart Meters with Chip Whisperer(youtube.com)

    3 points by BitBangingBytes 5y ago|0 comments
12. 12.▲
    by BitBangingBytes 5y ago

    There are two radio’s in the meter, one for zigbee and one for the 900MHz mesh that sends this data back to power company. The zigbee side isn’t used at all here anymore, they killed our ability to view our usage with it.
13. 13.▲
    Hacking Smart Meters [video](youtube.com)

    1 points by BitBangingBytes 5y ago|0 comments