PSW #778 - Philippe Laulheret

<p>How to get into reversing embedded firmware? Can the planet really be hacked? We'll go over a couple of fun exploitation examples, see what mistakes were made and maybe what could have been done better to make these devices tougher to break into.</p> <p> </p> <p>Segment Resources:</p> <p>Voip phone hacking: Blog: <a href= "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/avaya-deskphone-decade-old-vulnerability-found-in-phones-firmware/"> https://www.mcafee.com/blogs/other-blogs/mcafee-labs/avaya-deskphone-decade-old-vulnerability-found-in-phones-firmware/</a></p> <p>Def Con presentation (intro to hardware hacking): <a href= "https://www.youtube.com/watch?v=HuCbr2588-w&ab_channel=DEFCONConference"> https://www.youtube.com/watch?v=HuCbr2588-w&ab_channel=DEFCONConference</a></p> <p>Medical Research: BBraun infusion pump: <a href= "https://www.youtube.com/watch?v=6agtnfPjd64&ab_channel=hardwear.io"> https://www.youtube.com/watch?v=6agtnfPjd64&ab_channel=hardwear.io</a></p> <p>Medical devices under attack: <a href= "https://www.rsaconference.com/USA/agenda/session/Code%20Blue%20Medical%20Devices%20Under%20Attack"> https://www.rsaconference.com/USA/agenda/session/Code%20Blue%20Medical%20Devices%20Under%20Attack</a></p> <p>Hacking DrayTek routers: <a href= "https://www.youtube.com/watch?v=CD8HfjdDeuM&ab_channel=Hexacon"> https://www.youtube.com/watch?v=CD8HfjdDeuM&ab_channel=Hexacon</a></p> <p>Philippe's public work: <a href= "https://github.com/philippelaulheret/talks_blogs_and_fun">https://github.com/philippelaulheret/talks_blogs_and_fun</a></p> <p> </p> <p>In the Security News: Turning traffic lights green with the flipperzero (and a bunch of other hardware), suspending AV and EDR, Test signing mode, Linux control freaks, hacking the Apple Studio Disaply, Intel;s attack surface reduction claim, the truth about TikTok that everyone is missing, just stop developing AI, but only for 6 months, anyone can connect to Amazon's wireless network, revoking the wrong things, losing your keys, the funny, not-so-funny thi