Unnamed Reverse Engineering Podcast

Jen and Alvaro were guests on the Reverse Engineering Plus Plus Podcast. Check them out at REPP.show! [https://repp.show/]

Here are some of the things we talked about: * https://www.media.mit.edu/projects/seeing-around-objects/overview/ [https://www.media.mit.edu/projects/seeing-around-objects/overview/] * https://en.wikipedia.org/wiki/Light_field_camera [https://en.wikipedia.org/wiki/Light_field_camera] * Jiska’s inactivity reboot research [https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html] * 404 Media Article about inactivity reboot [https://www.404media.co/police-freak-out-at-iphones-mysteriously-rebooting-themselves-locking-cops-out/] * Joe Grand’s YouTube [https://www.youtube.com/@JoeGrand/videos] * Ken Shiriff - https://www.righto.com/ [https://www.righto.com/] * John McMaster - https://siliconpr0n.org/ [https://siliconpr0n.org/] * Piotr Esden-Tempski https://1bitsquared.com/ [https://1bitsquared.com/] * Ferrite for iOS [https://www.wooji-juice.com/products/ferrite/] * Azeria - Arm book - https://azeria-labs.com/ [https://azeria-labs.com/] https://x.com/fox0x01 [https://x.com/fox0x01] https://leg-assembly.com/ [https://leg-assembly.com/] * Marcan Asahi linux [http://asahilinux.org] * Joe Fitz [https://x.com/securelyfitz] * Foone [https://mastodon.social/@foone@digipres.club] * Bunnie Huang - Turning Everyday Gadgets into Bombs is a Bad Idea [https://www.bunniestudios.com/blog/2024/turning-everyday-gadgets-into-bombs-is-a-bad-idea/] * Kill decision [https://en.wikipedia.org/wiki/Kill_Decision] book by Daniel Suarez * Maddie Stone [https://www.ragingrock.com//pages/about.html] * Malware Unicorn [https://malwareunicorn.org/#/] * POSEE [https://indieweb.org/POSSE] Show stats as of December 1 2024: Title Release Date Unique Downloads duration_seconds duration_formatted 001 - Success! Aug 14, 2017 4,421 2567.41 0:42:47 002 - Cheap And Easy Aug 29, 2017 3,763 3300.19 0:55:00 003 - Barbies and Keyboards Sep 17, 2017 2,741 2025.26 0:33:45 004 - 0x0FF the Rails Oct 12, 2017 3,461 4142.3 1:09:02 005 - Circuits That Go Nowhere Nov 05, 2017 3,866 3439.2 0:57:19 006 - Marketing Via Stickers Dec 05, 2017 2,832 1029.78 0:17:09 007 - Candy Coated Jan 03, 2018 3,439 2767.85 0:46:07 008 - T0015! Part 0x1 Mar 09, 2018 3,600 1663.35 0:27:43 009 - T0015! Part 0x2: All Ur sigs R belong to uS. Apr 14, 2018 3,651 1710.66 0:28:30 010 - T0015! Part 0x3 - Debug Interfaces May 14, 2018 3,421 2127.58 0:35:27 011 - Making Too Many Assumptions Jun 03, 2018 3,199 2715.12 0:45:15 012 - Cheese vs. SDR Jun 29, 2018 3,218 3987.09 1:06:27 013 - It's Not Magic Jul 04, 2018 3,552 4965.74 1:22:45 014 - Ferrycast Jul 09, 2018 3,209 2419.78 0:40:19 015 - Updates! Aug 30, 2018 2,990 1172.03 0:19:32 016 - Supercon 2018 Part 1 Nov 10, 2018 2,731 2678.26 0:44:38 017 - Supercon 2018 Part 2 Nov 11, 2018 2,776 2866.56 0:47:46 018 - Ghidra Mar 15, 2019 3,433 1277.65 0:21:17 019 - It's Still Not Magic Apr 06, 2019 3,244 2701.62 0:45:01 020 - Hardwear.io CTF Interviews Jun 16, 2019 2,607 1747.3 0:29:07 021 - Silent Disco Wizards Jun 23, 2019 2,549 1616.32 0:26:56 022 - Bits Through the Microscope Jun 30, 2019 2,583 1455.57 0:24:15 023 - Magic Moonbeams Jul 08, 2019 2,599 1968.33 0:32:48 024 - Cars, Servers, and FPGAs! Jul 14, 2019 4,046 5272.64 1:27:52 025 - Opaque Magisterium Aug 14, 2019 3,418 5891.14 1:38:11 026 - You Can Lose in so Many Colors! Aug 30, 2019 3,768 7437.72 2:03:57 027 - The Box Sep 08, 2019 2,728 1978.28 0:32:58 028 - Everyone Has a Bag of Tricks Sep 15, 2019 3,326 4440.62 1:14:00 026a Easter Egg Extra Sep 21, 2019 6,666 78.3 0:01:18 029 - Old Timey Name Droppin’ Oct 16, 2019 3,464 6108.44 1:41:48 030 - Supercon 2019 Dec 01, 2019 2,797 2193.4 0:36:33 031 - The Title Isn’t DibbleDabble Dec 27, 2019 3,150 2691.97 0:44:51 032 - High Molarity Rants Feb 25, 2020 3,239 4232.96 1:10:32 033 - All Over the Place Apr 27, 2020 2,924 2725.33 0:45:25 034 - Mechanical RE Jun 22, 2020 2,715 5550.24 1:32:30 035 - Giving it all away (Listener Survery) Jul 04, 2020 1,936 379.36 0:06:19 036 - ADDVulcan - Hack-a-sat Part 1 Jul 20, 2020 2,406 3438.36 0:57:18 037 - 2020 Survey Results Aug 04, 2020 2,100 1856.98 0:30:56 038 - My Favorite Random Number is 5 Aug 22, 2020 2,892 4540.08 1:15:40 039 - Changing the Nature of Reality Sep 13, 2020 2,667 3678.39 1:01:18 040 - Uh-tastic Oct 03, 2020 2,405 1612.5 0:26:52 041 - What did you fail at this week? Nov 07, 2020 2,956 5504.59 1:31:44 042 - Diwali in the Morning Nov 24, 2020 2,612 3324.93 0:55:24 043 - Filling In Zeros Dec 21, 2020 2,599 4542.95 1:15:42 044 - Scots Army Knife Jan 03, 2021 3,355 6217.34 1:43:37 045 - Rizin and Cutter Feb 15, 2021 3,271 4879.4 1:21:19 046 - Never Reveal the Prestige Mar 18, 2021 2,903 5659.94 1:34:19 047 - The Sun, The Moon, The Stars May 16, 2021 2,650 3042.08 0:50:42 048 - A Bad Case of Kubernitis Jun 06, 2021 3,504 4561.54 1:16:01 049 - Reversing Your Childhood One Game At a Time Jul 10, 2021 3,117 3657.36 1:00:57 050 - Four Years In Aug 22, 2021 2,737 3182.26 0:53:02 051 - Collecting Students With Similar Names Oct 05, 2021 3,113 5296.86 1:28:16 052 - Twitter Is My Lab Notebook Oct 26, 2021 3,607 7612.66 2:06:52 053 - It's Hammer Time! Dec 16, 2021 3,678 6024.75 1:40:24 054 - It’s A Calibration, Not An Update! Feb 11, 2022 3,816 4582.27 1:16:22 055 - Stacks Of Bricked Chips Mar 13, 2022 3,626 3716.49 1:01:56 056 - Listening to Jupiter Mar 16, 2022 3,981 4377.36 1:12:57 057 - I Did Not Expect Sharks! May 09, 2022 3,949 5855.03 1:37:35 058 - Technically Met the Specs Jun 15, 2022 3,424 5321.05 1:28:41 059 - Instant Nerd Snipe Jul 04, 2022 3,578 3736.53 1:02:16 060 - The Brie List Aug 12, 2022 3,504 3173.46 0:52:53 061 - A Case of the Sniffles Nov 09, 2022 3,185 3599.93 0:59:59 062 - Keymap Rain Dance Dec 30, 2022 3,581 4588.83 1:16:28 063 - I Read Online That It’s Impossible Mar 26, 2023 4,054 4501.32 1:15:01 064 - MS-DOS Malware Chose Me May 21, 2023 3,317 4093.39 1:08:13 065 - Multitalented Grinch Jul 30, 2023 2,932 3831.25 1:03:51 066 - Use Your Scope! Dec 09, 2023 3,135 6012.58 1:40:12 067 - I Don't Know What I'm Doing Mar 02, 2024 2,021 927.97 0:15:27 068 - The Monkey Button Apr 07, 2024 2,458 4131 1:08:51 069 - Canned Cheese and Onion Rings Apr 17, 2024 2,576 4977.68 1:22:57 070 - I Have a DediProblem Jun 09, 2024 3,135 6972.11 1:56:12 071 - Snerd Niped Sep 07, 2024 4,077 5462.2 1:31:02 Have comments or suggestions for us? Find us on twitter @unnamed_show [https://twitter.com/unnamed_show] , or email us at show@unnamedre.com [show@unnamedre.com] . Music by TeknoAxe [http://www.teknoaxe.com] ( http://www.youtube.com/user/teknoaxe [http://www.youtube.com/user/teknoaxe] )

Thomas Roth (aka Stacksmashing [https://stacksmashing.net/]) joined us again to chat about all the new projects he’s been working on. We talked about iPhone and Macbook reversing, HexTree.io [http://hextree.io], the  RP2350 Hacking Challenge [https://www.hextree.io/rp2350-hacking-challenge], and more!  Here are links to some of the topics we covered: * Getting JTAG on the iPhone 15 [https://www.youtube.com/watch?v=D8UGlvBubkA] (video) * https://t8012.dev/ [https://t8012.dev/] * 37C3 - Apple's iPhone 15: Under the C [https://www.youtube.com/watch?v=Y8MlsiMoLAQ] * Marc Zyngier’s Central Scrutinizer  [https://kernel.googlesource.com/pub/scm/linux/kernel/git/maz/cs-hw/] * Macvdmtool [https://github.com/AsahiLinux/macvdmtool] * Asahi Linux [https://asahilinux.org/] * AsahiLinux USB-PD Docs [https://github.com/AsahiLinux/docs/wiki/HW%3AUSB-PD]  * Tamarin-C iPhone/Mac bus explorer [https://github.com/stacksmashing/tamarin-c]  * chipSHOUTER [https://www.newae.com/products/nae-cw520] and PicoEMP [https://github.com/newaetech/chipshouter-picoemp] * ACE up the Sleeve: Hacking into Apple’s New USB-C Controller [https://www.youtube.com/watch?v=QlaJQEa3_zQ]  * Breaking Bitlocker - Bypassing the Windows Disk Encryption [https://www.youtube.com/watch?v=wTl4vEednkQ] * Cold Boot Attack [https://en.wikipedia.org/wiki/Cold_boot_attack] * T8012 Team Ace Controller Secrets [https://blog.rickmark.me/ace-controller-secrets/] * Embedded Systems Village [https://embeddedvillage.org/] * Faultier [https://1bitsquared.com/collections/embedded-hardware/products/faultier] at 1bitsquared US and EU [https://1bitsquared.de/products/faultier]  * Crowbar (circuit) [https://en.wikipedia.org/wiki/Crowbar_(circuit)] * Toorcamp 2024 Keynote Video [https://www.youtube.com/watch?v=fE2-zbqfOz4] * The Hardware Hacking Handbook [https://nostarch.com/hardwarehacking] * BlackMagic Probe [https://black-magic.org/index.html] * Orbcode [https://orbcode.org/] Have comments or suggestions for us? Find us on twitter @unnamed_show [https://twitter.com/unnamed_show],  or email us at show@unnamedre.com [show@unnamedre.com]. Music by TeknoAxe [http://www.teknoaxe.com] (http://www.youtube.com/user/teknoaxe [http://www.youtube.com/user/teknoaxe])

We talked to Jesse Michael (@jessemichael [https://x.com/jessemichael]) and Mickey Shkatov(@hackingthings [https://x.com/hackingthings]) about BIOS/UEFI reverse engineering and more! Here’s a list of some of the things we talked about: * Eclypsium [https://eclypsium.com/] * Driving Down the Rabbit Hole [https://www.youtube.com/watch?v=5QBOmr_ZyLo] (DEFCON 25 talk about Nissan Leaf exploit) * Intel WiGig [https://en.wikipedia.org/wiki/WiGig] * BIOS [https://en.wikipedia.org/wiki/BIOS] * Port 0x80 [https://docs.oracle.com/cd/E19127-01/ultra24.ws/820-2480-12/AppB.html] * UEFI [https://en.wikipedia.org/wiki/UEFI] * https://github.com/tianocore/edk2 [https://github.com/tianocore/edk2] for UEFI  * DediProg SF100 [https://www.dediprog.com/product/SF100](And SF600 [https://www.dediprog.com/product/SF600]) * Chip Clips [https://www.pomonaelectronics.com/products/test-clips/ic-test-clips] * chipsec [https://github.com/chipsec/chipsec] * UEFITool [https://github.com/LongSoft/UEFITool] * BusPirate [https://buspirate.com/] * Tigard [https://1bitsquared.com/products/tigard] * QEMU [https://www.qemu.org/] * VMWare Workstation [https://www.vmware.com/products/workstation-player/workstation-player-evaluation.html.html.html] * UEFI exploitation for the masses [https://www.youtube.com/watch?v=CxqNgjMZAbk] (DEFCON 26 presentation) * One Bootloader to Load Them All [https://www.youtube.com/watch?v=99t7wEYs8h0] (DEFCON 30 presentation) * BIOS Dehumidifier Function [https://youtu.be/-mQfFVT4tT8?si=OIiKiim17Y_O2G85] * Remotely Attacking System Firmware [https://youtu.be/LtiAoMjIuvw?si=T3Rjj8ybXdLkCUOT] (BlackHat 2018) * Intel System Studio 2020 * Intel DCI [https://web.archive.org/web/20220105063019/https://2019.osfc.io/uploads/talk/paper/18/Debugging%5FIntel%5FFirmware%5Fusing%5FDCI%5F%5F%5FUSB%5F3.0.pdf] * USB A/A cable for DCI Debugging [https://www.datapro.net/products/usb-3-0-super-speed-a-a-debugging-cable.html] * Damn Vulnerable UEFI (Look out for BlackHat talk [https://www.blackhat.com/us-24/arsenal/schedule/index.html#damn-vulnerable-uefi-dvuefi-an-exploitation-toolkit-and-learning-platform-for-unveiling-and-fixing-uefi-firmware-vulnerabilities-39058]) * UEFI DOOM [https://github.com/Cacodemon345/uefidoom] * Flappy Bird in UEFI [https://github.com/fabianishere/boot2flappy] * UEFI Tetris [https://github.com/a1ive/uefi-tetris] * Self-Replicating UEFI App [https://github.com/netspooky/golfclub/tree/master/uefi/bggp4] (In 420 bytes!) * System Management Interrupt [https://wiki.linuxfoundation.org/realtime/documentation/howto/debugging/smi-latency/smi] * Unknown Cheats Forum [https://www.unknowncheats.me/forum/index.php] * System Management Mode [https://en.wikipedia.org/wiki/System_Management_Mode] * Edk-devel mailing list [https://edk2.groups.io/g/devel] * Xenoh Kovah’s UEFI training videos [https://www.youtube.com/playlist?list=PLUFkSN0XLZ-ltETI20mpXOCdqC8rdven6] * efiSeek for ghidra [https://github.com/DSecurity/efiSeek] * efiXplorer for IDA [https://github.com/binarly-io/efiXplorer] * Binary Ninja [https://binary.ninja/] * Intel Management Engine [https://en.wikipedia.org/wiki/Intel_Management_Engine] * me_cleaner [https://github.com/corna/me_cleaner] * ME analyzer [https://github.com/platomav/MEAnalyzer] (By platomav) * CPUMicrocodes [https://github.com/platomav/CPUMicrocodes] (By platomav) * Coreboot [https://www.coreboot.org/] * 010 Hex Editor [https://sweetscape.com/010editor/] * Stardock Fences (For Icon management) [https://www.stardock.com/products/fences/] * Notepad++ [https://notepad-plus-plus.org/] * The Newlywed Game [https://www.youtube.com/watch?v=ZiARvvemLlk] * Streamdeck [https://www.elgato.com/us/en/p/stream-deck-mk2-black] * Toorcamp [https://toorcamp.org/] Have comments or suggestions for us? Find us on twitter @unnamed_show [https://twitter.com/unnamed_show],  or email us at show@unnamedre.com [show@unnamedre.com]. Music by TeknoAxe [http://www.teknoaxe.com] (http://www.youtube.com/user/teknoaxe [http://www.youtube.com/user/teknoaxe])

Ian from DangerousPrototypes [http://dangerousprototypes.com/blog/] (@DangerousProto [https://twitter.com/dangerousproto]) joined us to chat about the new BusPirate 5 [https://buspirate.com/], DirtyPCB [https://dirtypcbs.com/store/pcbs]’s, and more! Check out this BusPirate 5 post [https://buspirate.com/bus-pirate-5-rev-10-now-available/] for pictures of many things we mentioned on the show. * Ian’s Halloween onion rings [https://www.instructables.com/Goooulish-Onion-O-s-Onion-Rings/] (And other instructables [https://www.instructables.com/member/ian/instructables/]) * BusPirate [https://buspirate.com/get/] * Taobao [https://world.taobao.com/] * Ian’s Maker Faire 2012 Video [https://www.youtube.com/watch?v=2qkT9hLQPy0] * Seedstudio [https://www.seeedstudio.com/] * BusBlaster [http://dangerousprototypes.com/docs/Bus_Blaster] * Haxelerator [https://hax.co/] * Bunnie’s “The Essential Guide to Electronics in Shenzen” [https://bunniefoo.com/bunnie/essential/essential-guide-shenzhen-web.pdf] * Naomi Wu’s updated version of the guide [https://www.crowdsupply.com/machinery-enchantress/the-new-essential-guide-to-electronics-in-shenzhen#products] * OSHPark [https://oshpark.com/] * DirtyPCBs [https://dirtypcbs.com/store/pcbs] * DirtySLA [https://dirtypcbs.com/store/print3d] * DirtyAcryllics [https://dirtypcbs.com/store/lasercut] * DirtyCables [https://dirtypcbs.com/store/cables] * Arduboy [https://www.arduboy.com/] * Canned Cheese (Alvaro’s recommendation) [https://creamery.wsu.edu/cougar-cheese/] * Expressway to Pleasure [http://expresswaytopleasure.com/] * Hacker Camp  Shenzhen [http://hackercampshenzhen.com/] * PCBite [https://sensepeek.com/] * PIZZAbite [https://github.com/whid-injector/PIZZAbite] * Sigrok [https://sigrok.org/wiki/Main_Page] * Saleae [https://www.saleae.com/] * Prusa MINI [https://www.prusa3d.com/product/original-prusa-mini-3/] * Flylin Consulting [http://flylin.co]   Have comments or suggestions for us? Find us on twitter @unnamed_show [https://twitter.com/unnamed_show],  or email us at show@unnamedre.com [show@unnamedre.com]. Music by TeknoAxe [http://www.teknoaxe.com] (http://www.youtube.com/user/teknoaxe [http://www.youtube.com/user/teknoaxe])