Jasper van Woudenberg

Jasper van Woudenberg

@jzvw.bsky.social

61 followers131 following2 posts

Jasper van Woudenberg reposted

dragosr
@dragostech.bsky.social

Great presentation, glitching the RPi 2350 on an unprotected path (USB VDD, they glitch protect others) to disturb reading critical OTP permission bits to mistakenly enable unsecured RISC-V cores to mess with TrustZone secured ARM cores without any limitations. streaming.media.ccc.de/38c3/relive/...

streaming.media.ccc.deRelive: Hacking the RP2350 – 38C3: Illegal Instructions StreamingLive streaming from the 38th Chaos Communication Congress

Jasper van Woudenberg reposted

Jonathan Pallant
@thejpster.org.uk

events.ccc.de/congress/202... You can bypass security on the RP2350 by glitching the OTP power supply (which does not have a glitch detector on it). This causes OTP to supply "guard data" instead of real data, and interpreting the guard data happens to enable RISC-V mode, which can do anything.

events.ccc.de38c3: Hacking the RP2350The RP2350 security architecture involves several interconnected mechanisms which together provide authentication of code running on the chip, protected one-time-programmable storage, fine-grained con...
Jasper van Woudenberg
@jzvw.bsky.social

Yet another DMA form factor… Proper use of the IOMMU remains the primary mitigation.

Catalin Cimpanu@campuscodi.risky.biz

Positive Technologies has developed a new attack that exploits the SD Express standard to gain access to a device's memory through its SD card reader The DaMAgeCard attack exploits the fact that the new SD Express standard can operate in both SDIO and NVMe swarm.ptsecurity.com/new-dog-old-...

Jasper van Woudenberg reposted

Ken Shirriff
@righto.com

Intel launched the Pentium processor in 1993. Unfortunately, dividing sometimes gave a slightly wrong answer, the famous FDIV bug. Replacing the faulty chips cost Intel $475 million. I reverse-engineered the circuitry and can explain the bug. 1/9

You are up to date.