Stenobird

Episode

063 - I Read Online That It's Impossible

Podcast
Unnamed Reverse Engineering Podcast
Published
Mar 26, 2023
Duration seconds
4502
Processing state
processed
Canonical source
https://unnamedre.com/episode/63
Audio
https://traffic.libsyn.com/secure/reverseengineering/063_-_I_Read_Online_That_Its_Impossible.mp3?dest-id=552832
JSON
/v1/public/podcasts/unnamed-reverse-engineering-podcast-752753/episodes/063-i-read-online-that-it-s-impossible
Markdown
/podcast/unnamed-reverse-engineering-podcast-752753/063-i-read-online-that-it-s-impossible.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/unnamed-reverse-engineering-podcast-752753/episodes/063-i-read-online-that-it-s-impossible/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/unnamed-reverse-engineering-podcast-752753/063-i-read-online-that-it-s-impossible.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

Security researcher Thomas Roth (StackSmashing) breaks down the hardware vulnerabilities found in Apple AirTags and the techniques used to bypass iPhone security. The discussion covers fault injection, low-level debugging via custom cables, and the accessibility of modern consumer electronics for reverse engineering.

Topics

  • Hardware Reverse Engineering
  • Fault Injection
  • Apple AirTag
  • iPhone Security
  • JTAG Debugging
  • Raspberry Pi Pico
  • Firmware Analysis
  • Embedded Systems

Highlights

  • Main idea: Apple AirTags are surprisingly accessible for hardware reverse engineering due to their specific complexity and size
  • Practical takeaway: Using a Raspberry Pi Pico with custom firmware can replicate expensive professional debugging cables like the Bonobo cable
  • Failure mode: Precise timing is critical in fault injection; even microsecond deviations can prevent successful JTAG enablement
  • Main idea: The transition from Lightning to USB-C introduces new challenges for peripheral authentication and hardware hacking
  • Practical takeaway: Python has become an essential tool for automating hardware glitching and managing complex reverse engineering workflows

Chapters

  1. 1:00 Introduction to StackSmashing: Thomas Roth introduces his background in security research, hardware hacking, and his YouTube channel.
  2. 7:00 Reverse Engineering Apple AirTags: A discussion on why the AirTag's architecture makes it a prime target for hardware exploitation.
  3. 12:00 Fault Injection and JTAG: Technical deep dive into using voltage glitching to enable JTAG debugging on locked hardware.
  4. 18:00 The Utility of Python in Hardware Hacking: How automation and scripting are used to manage modern reverse engineering projects.
  5. 23:00 iPhone Debugging and Lightning Cables: Exploring the complexities of Apple's proprietary cables and the potential for USB-C exploitation.
  6. 40:00 The Tamarin Project: An overview of the Raspberry Pi Pico-based tool designed to replace expensive professional debugging hardware.
  7. 7:40 GameBoy Reverse Engineering: A look into the bootrom and the technical challenges of hacking classic Nintendo hardware.