Our @defcon.bsky.social talk is online: youtu.be/FXIScbxJTZw!
Ever wanted to get banned from online games without cheating? We've got you covered! Check out this talk for fun hacks tripping off modern anticheats.
Joined work with Sam Collins and Tom Chothia.
More Info: game-research.github.io
Preview of paper: "Security Through Transparency: Tales from the RP2350 Hacking Challenge". The image shoes the upper half of the first page of the paper.
Our work on solving @raspberrypi.com's RP2350 Hacking Challenge is now online! 5 different attacks and lots of lessons learned.
Joint work with Aedan Cullen, Kévin Courdesses, @stacksmashing.bsky.social, and Andrew Zonenberg!
Paper: www.usenix.org/system/files...
Repo: github.com/bhamsec/woot...
Two winners of the RP2350 Hacking Challenge will present their results at WOOT!
Muench et al. break its secure boot guarantees through voltage, electromagnetic, and laser fault injection 💥 techniques: www.usenix.org/conference/w...
📢 Excited to announce that the results on BaseBridge, our project on improving cellular baseband emulation, are going public this week. Dyon will present at IEEE S&P on Monday 3pm, while David and I will be on stage at @offensivecon.bsky.social on Saturday 11am with even more details! 1/6
I'm proud to announce that myself and @AtipriyaBajaj have created the Workshop on Software Understanding and Reverse Engineering (SURE), which will be co-located at CCS 2025. sure-workshop.org/
Please follow our workshop account @sureworkshop and RT it for visibility :).
No joke, another video! Marius and Tomasz share the ins and outs of modern SIM hacking!
Roadmap of the SIMsalabim re-verse.io talk. It shows the backplane of a disassembled Pixel 6 phone together with a iconized SIM and a picture of an interposer. Five locations are marked: (0) SIM interface, (1) Baseband, (2) Attack Surface, (3) Vulnerabilities, (4) Interposer
Really enjoyed speaking at the inaugural edition of @re-verse.io!
You can find Tomasz' and my slides on tricks with SIMs and interposers here: tinyurl.com/reverse25-si...
Looking forward to share our latest research on hostile SIMs and interposers at the upcoming RE//verse conference!
(please re-post for reach - thank you!)
Learned a cool new Linux trick? Know an interesting quirk in a network protocol? Or have something else to share?
Write a 1-page article for the #6 issue of Paged Out! :)
pagedout.institute?page=cfp.php
Soft deadline is Feb 1st.
happy new year 🎉
to continue the tradition, here is some of my favorite firmware & embedded security research of 2024:
Defeating the new Raspberry Pi's RP2350 Security Features [1]
Reversing and Hacking Firmware of an in-orbit Satellite to Re-establish Lost Communication [2]