- 166comments
- 22comments
- 39comments
- 101comments
- 69comments
- 225comments
- 128comments
- 17comments
- 11comments
- 132comments
- 189comments
- 10comments
- 604comments
- 77comments
- —discuss
- 12comments
- 24comments
- 71comments
- 8comments
- 13comments
- 172comments
- 5comments
- 18comments
- 80comments
- 83comments
- 49comments
- 224comments
- 2comments
- 63comments
- 685comments
Not super practical, but neat attack
*currently
$300,000 next year.
We're already up to 400,000 just today.
In 5 years, either $400,000 or $50 and a hammer, depending on whether the core piece of the process aligns with the needs of some fast-growing consumer tech product like e.g. drones.
Some people have such and other toys just at work and can use it in spare time.
250k is not a bad investment for a company doing "reverse engineering as a service" - say 1k a pop to extract the firmware. Naturally, a good business idea for somewhere in the world with less regulations...
That is peanuts for a nation-state actor.
Sure, but if you’re defending against a nation state actor hopefully you aren’t expecting a raspberry pi to keep you secure.
The RP2350 is an inexpensive microcontroller IC with reasonable performance and some very useful (and somewhat unusual) features in its PIO blocks.
Why wouldn't a person build that into the heart of something important?
"Important" and "tamper proof against a determined adversary" are very different goals.
Is there anything about these techniques that are raspberry pi specific? It seems like they're using lasers to identify and flip particular bits in registers.
It reads as impressive defense. Meaning that it's presumably not possible to get root with physical access on a live 50$ device without 250k capital
This is for a $1 microcontroller. I'm assuming you're talking about the Raspberry Pi computers based on the $50 cost and root.
There's always an XKCD... https://xkcd.com/538/
It needs to be updated. Modern evil planners don't even need a wrench since they already have most keys given to them in advance by everyone, including nerds
Care to expand?
That's reminiscent of when we first found out that if you opened up dram chips you could use them for imaging. Of course the scale at which this is done is extremely impressive.
Now it can be done for Apple iPhone. Apple is cooked.
I appreciate all the details they provide in the post. The $250k in lab gear is useful when initially discovering, exploiting and documenting attacks like this.
Definitely doable in a home lab for under $25k in equipment, likely under $10k.
Same as my replicating Colin O’Flynn’s BAM BAM attack on a MPC5566 chip, he used a ChipShouter ($5,000) and I used a PicoEMP ($50).
https://youtu.be/URmI1VVilek