Lemmy Today
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
MazonnaCara89@lemmy.ml to Reverse Engineering@lemmy.mlEnglish · 28 days ago

Adventures of My Oven (Pinocchio) with ChipWhisperer

cfp.recon.cx

external-link
message-square
0
link
fedilink
  • cross-posted to:
  • reverseengineering@infosec.pub
1
external-link

Adventures of My Oven (Pinocchio) with ChipWhisperer

cfp.recon.cx

MazonnaCara89@lemmy.ml to Reverse Engineering@lemmy.mlEnglish · 28 days ago
message-square
0
link
fedilink
  • cross-posted to:
  • reverseengineering@infosec.pub
Adventures of My Oven (Pinocchio) with ChipWhisperer 2023
cfp.recon.cx
external-link
You probably wouldn't consider power analysis & fault injection being a required skill set for your oven repair person. But when your oven is actively lying to you and not just broken, a new type of repair is needed beyond just replacing a heating element. This talk starts from a common complaint: how a range of Samsung ovens show you only the set temperature, and the actual temperature varies widely (and is often incorrect). Using an attack combining power analysis & fault injection the code protection of the Toshiba TMP91FW series microcontrollers used in the controller is bypassed using a ChipWhisperer-Husky, which allows recovery of the oven firmware. From there the firmware is reverse engineered, and new functions are added to output the internal measured temperatures & control signals for analysis. This allows us to definitely demonstrate that the reason our thanksgiving turkey took so long to cook: an inflexible control system that cannot enable the heater long enough. Finally as a proof of concept, a patched version of the firmware improves how quickly it can recover, and is demonstrated cooking a souffle (all while displaying the actual oven temperature, also fixing one of the other common complaints). The documentation and tools are helpful for others repairing these ovens, hopefully diverting them from become waste.
alert-triangle
You must log in or register to comment.

Reverse Engineering@lemmy.ml

reverse@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !reverse@lemmy.ml

Reverse Engineering

Community to share or talk about RE. Clean, simple and without nonsense.

Community Rules

  • Stay on the topic or open your own thread.
  • No spoon-feeding.
  • No re-posts, unless original source is offline or existent thread cannot be edited because you are not the owner.
  • No racism or racist stereotypes.
  • No tracking in links or ip-loggers/grabbers. Clean URLs only (without ref).
  • No conspiracy theories or misinterpretations.
  • Avoiding Logical Fallacies - Logical fallacies are errors of reasoning - specific ways in which arguments fall apart due to faulty connection making.
  • No endless quoting, or community ban, make your point but do not argue without anything just because you want to be right.
  • No trolling, or community ban. I have no time to play the Kindergarten Cop, this also extends to abusing of Lemmy’s report function, you will be excluded from this community if you create drama with bogus reports.
  • No NSFW of any kind unless it is to spot NSFW e.g. via A.I./ML without showing actual NSFW content. Example. Reversing tools like this or show guidance is okay with me.
  • Law regarding reverse engineering.

Useful Tools

  • x64debug
  • Ghidra
  • radare2
  • GNU Project Debugger
  • Cutter
  • EDB (Evan’s Debugger)
  • REDasm
  • Boomerang decompiler
  • Medusa - Disassembler

Useful Resources

  • List of reversing resources
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 24 users / month
  • 38 users / 6 months
  • 1 local subscriber
  • 186 subscribers
  • 21 Posts
  • 1 Comment
  • Modlog
  • mods:
  • CHEF-KOCH@lemmy.ml
  • BE: 0.19.11
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org