Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Cloudflare Quick Tunnels(cloudflare.com ↗)
    132comments
  2. Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug(ledger.com ↗)
    7comments
  3. North Korean nuclear test sets off years of earthquakes(science.org ↗)
    79comments
  4. Show HN: Cactus Needle 3: 8-29MB automation models can match DeepSeek V4 Flash(cactuscompute.com ↗)
    24comments
  5. C++26: Trivial infinite loops are no longer undefined behaviour(sandordargo.com ↗)
    106comments
  6. OpenJev(openjev.com ↗)
    212comments
  7. I vibed a proof of Conway's conjecture(overreacted.io ↗)
    114comments
  8. An empirical study of harness design for coding agents(arxiv.org ↗)
    41comments
  9. A heap overflow and SSO misconfiguration to compromise OpenAI internal repos(hacktron.ai ↗)
    181comments
  10. I don't like passkeys(hawksley.dev ↗)
    558comments
  11. Mathematicians Build Long-Awaited Graph Sandwich(quantamagazine.org ↗)
    6comments
  12. Jemalloc 5.4.0(github.com/jemalloc ↗)
    76comments
  13. GrassLobster: AI Agentic Generation of Parametric Geometry Workflows(miro.vision ↗)
    4comments
  14. NATS publishes preliminary report on technical incident of 8 September(nats.aero ↗)
    23comments
  15. The scourge of x86 emulation(fex-emu.com ↗)
    68comments
  16. US Military had close call after using AI for hallucinated intelligence report(cnn.com ↗)
    3comments
  17. Cekura (YC F24) Is Hiring(ycombinator.com ↗)
    discuss
  18. The Shadows Lurking in the Equations – Underwater Islands(gods.art ↗)
    9comments
  19. Bonsai 2 27B: Near-Lossless Compression in a 9x Smaller Footprint(prismml.com ↗)
    176comments
  20. Show HN: Scry, programmable internet search w/ congestion pricing(scry.io ↗)
    3comments
  21. BeanShell3 in Development(beanshell.github.io ↗)
    13comments
  22. Warren Buffett Steps Down as Berkshire Chairman, Names Son to Replace Him(nytimes.com ↗)
    158comments
  23. US Treasuries Have Become Unappetizing for Foreign Central Banks and Governments(wolfstreet.com ↗)
    77comments
  24. Qwen 3.8 Omni Flash(qwen.ai ↗)
    118comments
  25. Build Faster Feedback Loops Using Qualitative User Research(nseldeib.com ↗)
    1comments
  26. Second Circuit Allows Government to Search Electronic Devices at the Border(knightcolumbia.org ↗)
    49comments
  27. There's no point at which turning your brain off will work(danluu.com ↗)
    80comments
  28. Systemd is a suite of basic building blocks(systemd.io ↗)
    1comments
  29. How to Write with an LLM(sockpuppet.org ↗)
    197comments
  30. Pre-Greek: The lost language hidden within Ancient Greek(linguisticdiscovery.com ↗)
    62comments

Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug

38 pointsby 1h agodonjon.ledger.com
7 comments
46m agoHN ↗

The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.

Not super practical, but neat attack

27m agoHN ↗

Some people have such and other toys just at work and can use it in spare time.

20m agoHN ↗

250k is not a bad investment for a company doing "reverse engineering as a service" - say 1k a pop to extract the firmware. Naturally, a good business idea for somewhere in the world with less regulations...

12m agoHN ↗

It needs to be updated. Modern evil planners don't even need a wrench since they already have most keys given to them in advance by everyone, including nerds

22m agoHN ↗

That's reminiscent of when we first found out that if you opened up dram chips you could use them for imaging. Of course the scale at which this is done is extremely impressive.