Loading feed…
Hacker News0 Hot0 comments38 min read
Laser Fault Injection on a Budget: RP2350 Edition
AI summary
Vào tháng 8 năm 2024, Raspberry Pi giới thiệu microcontroller RP2350 với các tính năng bảo mật mới như Secure Boot. Tại DEFCON 2024, một thử thách hack RP2350 được triển khai và tác giả đã phát thành công platform Laser Fault Injection tùy chỉnh để vượt qua nó. Bằng cách tiêm một lỗi laser duy nhất, tác giả có thể bypass cơ chế Secure Boot trên RP2350. Bài viết cung cấp chi tiết kỹ thuật về platform tùy chỉnh và file sản xuất cho ai muốn tự chế tạo, giúp hiểu rõ hơn về lỗ hổng bảo mật trong vi điều khiển.
AI summaries can be wrong. Read the original before relying on anything important.
Why read it: Bài viết tiết lộ cách chế tạo platform chi phí thấp để thực hiện tấn công fault injection bypass Secure Boot trên RP2350.
What do you remember?
Answer 3 short questions to earn reward points for this article. Only do it if you want the points.
up to +17 points
3 questions · under a minute · optional
Source: https://courk.cc/rp2350-challenge-laser. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
8 Sync ecosystem
One account, the whole ecosystem
Read the news here, practice coding, follow structured courses and train for IELTS on our sibling products — all connected through one 8 Sync account.
8syncdev.com
8syncdev.comThe ecosystem home: product overviews, blog and full pricing.
ExploreCourses
course.8syncdev.comLearn along a clear roadmap: videos, auto-graded quizzes, certificates and mentors who ship for a living.
View the roadmapCoding practice
coding.8syncdev.com1,000 DSA problems in Vietnamese, auto-graded across 7 languages — many FREE, right in your browser.
Practice for freeIELTS
ielts.8syncdev.comAI grading for all four IELTS skills with detailed rubric feedback.
Try it freeZUS — AI IDE
zus.8syncdev.comA 22 MB AI IDE for Vietnamese devs.
Download freemind0
mind0.8syncdev.comOrganizational memory for AI agents.
ExploreAcoLeads
home-acoleads.8syncdev.comAI that staffs your Fanpage and qualifies leads for you.
Try itRecommended for you
C# Corner1 Hot15 min
Comparing NL2SQL Tools That Integrate with MCP Clients
Compares MCP-capable NL2SQL tools by their question-versus-SQL contracts, security boundaries, authentication, and authorization for database access.
freeCodeCamp234 Hot2 min
Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course
Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec
Hacker News1 Hot12 min
Firecracker VM Escape: PwnEscape Part 2
A malicious guest crossed Firecracker's microVM boundary, resolved the live VMM from inside the VM, and took control of a root-run host process—turning a Linux networking flaw into a guest-to-host code-execution primitive.
Noted1 Hot5 min
Someone Built a 4K Camera With a Raspberry Pi 5
A DIY camera built around a Raspberry Pi 5 features a custom enclosure, interchangeable lenses, open-source software, and 4K support.
Socket1 Hot16 min
Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.
Hacker News1 Hot3 min
The $8 Linux Computer (2022)
An $8 Ox64 RISC-V single-board computer can run full Linux, not a stripped-down MMU-less kernel. It has three different RISC-V cores, but ethernet, wifi and SD card don't work yet. Flashing it is painful: it must be programmed over UART, not USB, and DevCube crashes on Wayland so you need Xorg. A CH340G USB-UART dongle failed the handshake, so the author used an RP2040 (Adafruit KB2040) running picoprobe as a serial bridge, then had to modify bflb-mcu-tool's uart interface file to strip DTR/RTS handling before it would flash the M0 core.
Cyble1 Hot12 min
Rogue AI Agents: You Might Be Someone Else's AI Test Environment
Rogue AI agents hit Hugging Face, a U.S. Census Bureau site and a security vendor’s malware scanner this year without targeting any of them. Third-party risk programs have no line for that.
Flavio Copes1 Hot10 min
Tailscale tutorial: your Mac and a server on one private network
Install Tailscale on a Mac and a VPS, SSH by name, serve a page only you can open, close every public port, and use the server as an exit node.
Comments
Loading comments…