# 063 - I Read Online That It's Impossible

Page: https://stenobird.com/podcast/unnamed-reverse-engineering-podcast-752753/063-i-read-online-that-it-s-impossible
Text version: https://stenobird.com/podcast/unnamed-reverse-engineering-podcast-752753/063-i-read-online-that-it-s-impossible.md
Podcast: [Unnamed Reverse Engineering Podcast](https://stenobird.com/podcast/unnamed-reverse-engineering-podcast-752753)
Published: 2023-03-26T14:26:00+00:00
Episode link: https://unnamedre.com/episode/63
Audio file: https://traffic.libsyn.com/secure/reverseengineering/063_-_I_Read_Online_That_Its_Impossible.mp3?dest-id=552832
Processing state: processed
JSON: https://stenobird.com/v1/public/podcasts/unnamed-reverse-engineering-podcast-752753/episodes/063-i-read-online-that-it-s-impossible
Duration seconds: 4502

## Resource

Security researcher Thomas Roth (StackSmashing) breaks down the hardware vulnerabilities found in Apple AirTags and the techniques used to bypass iPhone security. The discussion covers fault injection, low-level debugging via custom cables, and the accessibility of modern consumer electronics for reverse engineering.

## Highlights
- Main idea: Apple AirTags are surprisingly accessible for hardware reverse engineering due to their specific complexity and size
- Practical takeaway: Using a Raspberry Pi Pico with custom firmware can replicate expensive professional debugging cables like the Bonobo cable
- Failure mode: Precise timing is critical in fault injection; even microsecond deviations can prevent successful JTAG enablement
- Main idea: The transition from Lightning to USB-C introduces new challenges for peripheral authentication and hardware hacking
- Practical takeaway: Python has become an essential tool for automating hardware glitching and managing complex reverse engineering workflows

## Topics

Hardware Reverse Engineering, Fault Injection, Apple AirTag, iPhone Security, JTAG Debugging, Raspberry Pi Pico, Firmware Analysis, Embedded Systems

## Chapters
- 1:00 — Introduction to StackSmashing: Thomas Roth introduces his background in security research, hardware hacking, and his YouTube channel.
- 7:00 — Reverse Engineering Apple AirTags: A discussion on why the AirTag's architecture makes it a prime target for hardware exploitation.
- 12:00 — Fault Injection and JTAG: Technical deep dive into using voltage glitching to enable JTAG debugging on locked hardware.
- 18:00 — The Utility of Python in Hardware Hacking: How automation and scripting are used to manage modern reverse engineering projects.
- 23:00 — iPhone Debugging and Lightning Cables: Exploring the complexities of Apple's proprietary cables and the potential for USB-C exploitation.
- 40:00 — The Tamarin Project: An overview of the Raspberry Pi Pico-based tool designed to replace expensive professional debugging hardware.
- 7:40 — GameBoy Reverse Engineering: A look into the bootrom and the technical challenges of hacking classic Nintendo hardware.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/unnamed-reverse-engineering-podcast-752753/episodes/063-i-read-online-that-it-s-impossible/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/unnamed-reverse-engineering-podcast-752753/063-i-read-online-that-it-s-impossible.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.