Cars, Bikes, Coffee and Embedded Systems Security | Founder @voidstarsec Training and Consulting https://xitter.cf/t.co/0ib8fK31Ib https://xitter.cf/t.co/YzN9K2LaST
RDU
Joined May 2019
- Tweets3.3K
- Following1.1K
- Followers5K
- Likes23.4K
Pinned Tweet
Happy Friday! Looking for weekend reading about hardware hacking?
JTAG: wrongbaud.github.io/posts/jt…
SWD: wrongbaud.github.io/posts/st…
I2C: wrongbaud.github.io/posts/Ho…
SPI: wrongbaud.github.io/posts/Ba…
UART: wrongbaud.github.io/posts/ro…
wrongbaud retweeted
Lessons for all the new researchers:
1. Write your own posts. Everyone knows what slop looks like.
2. Don't buy a domain name for a bug. It's 2026.
3. Learn the difference between bugs and architecture risks
4. Get friends. They should tell you your bad ideas suck
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Readers added context they thought people might want to know
The Tailscale SSH findings require prior authorized access on the tailnet per the researcher's report; Tailscale stated issues concern post-authorization behavior only and did not recommend disabling SSH for everyone.
tailworm.com
x.com/IntCyberDigest…
wrongbaud retweeted
EMFI adventure part 2: target characterization of a STM32H5 errno.fr/EM_Fault_Injection_…
wrongbaud retweeted
It's time to put my Adventures of Wallet Hacking series to bed, but not before one final chapter! Free livestream for all courtesy of @unicampoficial LICS Cybersecurity League. Announcement here: linkedin.com/feed/update/urn…
wrongbaud retweeted
📠 Beginners Guide: How to Build a Hardware Hacking Lab
Blog: voidstarsec.com/hw-hacking-l…
author: @wrongbaud
#infosec
wrongbaud retweeted
Reminder: sign up for our #BBOT training at @BSidesCHS on November 6. Hands-on recon automation, free seats, but you need to register.
zeffy.com/en-US/ticketing/bs…
wrongbaud retweeted
While working on my low-cost SEM project, I fully reverse-engineered the software that runs Keyence VE-series SEMs and integrated it into my new control suite, fixing big OEM bugs and *doubling* the image resolution, as well as adding e-beam lithography, stereo-3D, stacking & EDX
ALT SEM control software screenshot, image of chip captured.
ALT SEM control software screenshot, electron beam lithography demonstrated
wrongbaud retweeted
Join Atredian Bryan Alexander (@dronesec) at @bsidespdx on Friday, 10/23, at 2:30pm to learn a bit about exploiting the Steam platform! He'll be detailing several LPE and RCE vulnerabilities discovered within Valve's popular gaming platform. Come say hi!
buff.ly/fTYefGh
wrongbaud retweeted
6 months of hard work, and I'm back!
youtu.be/TGd-GwkY0wQ
wrongbaud retweeted
IIS shortname enumeration keeps opening doors it has no business opening. We have seen it chain into critical findings more than once.
New write-up on why this one deserves more attention than it gets.
blog.blacklanternsecurity.co…
wrongbaud retweeted
I've finally published the write up on my Pwn2Own exploit!!!
github.com/newbe3e/Pwn2Own-A…
(image unrelated)
wrongbaud retweeted
Posted some notes on modern android kernel debugging with a USB cable only @ github.com/d0mzw/pixel6-kgdb… I will be posting some additional research at weirdmachine.wtf this week.
wrongbaud retweeted
Turned a WiFi 7 router into a 320Msps SDR.
Custom firmware on its MediaTek MT7996 streams raw 14-bit IQ from 2.4/5/6GHz over 10GbE without dropping samples. It's not a snapshot mode, the waterfall is just one thing reading the stream.
github.com/h0m3us3r/w1700k-s…
wrongbaud retweeted
Laser Fault Injection to enable RP2350 Secure Debug (@DonjonLedger)
donjon.ledger.com/blog/rp235…
#infosec
wrongbaud retweeted
10Gbps #SLogic32U3 + an AI Agent turns you into a Real Hardware Hacker !🕶️
Tap all 32 pins of a GBA cartridge at up to 200 MSa/s, parse the bus in real time, and reproduce the game's video in an emulator as you play.
One afternoon of work☕
Get it here: kickstarter.com/projects/sip…
wrongbaud retweeted
New Blog Post!
Introduction to ARM ETM Tracing for Reverse Engineers!
In this post we extract a live instruction trace from a running Xbox controller, enjoy!
voidstarsec.com/blog/arm-tra…
If you're not experimenting with @i2cjak's backplane project, do yourself a favor and check it out:
github.com/i2cjak/Backplane
I just generated a bunch of gridfinity compatible cases for some previous PCBs I designed and it pretty much one-shot them.
New Blog Post!
Introduction to ARM ETM Tracing for Reverse Engineers!
In this post we extract a live instruction trace from a running Xbox controller, enjoy!
voidstarsec.com/blog/arm-tra…