There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

Hackers hope to democratize laser-based processor hacking — $500 RayV Lite relies on 3D printing, a laser pen, and a Raspberry Pi to bring costs down

… “The first of two versions of the RayV Lite will focus on laser fault injection (LFI). This technique uses a brief blast of light to interfere with the charges of a processor’s transistors, which could flip them from a 0 value to a 1 value or vice versa. Using LFI, Beaumont and Trowell have been able to pull off things like bypassing the security check in an automotive chip’s firmware or bypassing the PIN verification for a cryptocurrency hardware wallet.

The second version of the tool will be able to perform laser logic state imaging. This allows snooping on what’s happening inside a chip as it operates, potentially pulling out hints about the data and code it’s handling. Since this data could include sensitive secrets, LSI is another dangerous form of hacking that Beaumont and Trowell hope to raise awareness of.” …

A_A OP , (edited )
@A_A@lemmy.world avatar

Edit → in header… “The first of two versions of the RayV Lite will focus on laser fault injection (LFI). This technique uses a brief blast of light to interfere with the charges of a processor’s transistors, which could flip them from a 0 value to a 1 value or vice versa. Using LFI, Beaumont and Trowell have been able to pull off things like bypassing the security check in an automotive chip’s firmware or bypassing the PIN verification for a cryptocurrency hardware wallet. The second version of the tool will be able to perform laser logic state imaging. This allows snooping on what’s happening inside a chip as it operates, potentially pulling out hints about the data and code it’s handling. Since this data could include sensitive secrets, LSI is another dangerous form of hacking that Beaumont and Trowell hope to raise awareness of.” …

<a href=""></a>
Edit #2 : Can’t find this laser fault injection (LFI) on Wikipedia

Anissem ,
@Anissem@lemmy.ml avatar

Hack the planet!

Chee_Koala ,
Kolanaki ,
@Kolanaki@yiffit.net avatar

starts attacking the ground with an axe

Hack the planet!

kibiz0r ,

They’re trashing our rights! Trashing!

solrize ,

Security chips like smart card processors have safeguards against this sort of attack, fwiw. Regular chips are likely more vulnerable.

A_A OP ,
@A_A@lemmy.world avatar

Safeguards against LSi may include :
Sensor-based detection ?
Error detection and correction ?
Redundancy and duplication ?
Shielding // physical + chemical protection ?
Anti-tamper mechanisms ?
Randomization and noise injection ?

leisesprecher ,

Why the question marks, the answer is always yes.

A_A OP ,
@A_A@lemmy.world avatar

Because this is not my domain of expertise and I seek comments from other people.

solrize ,

Chapter from “Security Engineering” (2nd ed) about physical tamper resistance:

www.cl.cam.ac.uk/~rja14/Papers/SEv2-c16.pdf

It’s been ages since I read it so idr how much of it was at chip level. Really high end stuff have the secure chips in a tamper reactive enclosure so it’s difficult to get to them without first erasing the contents. The chapter discusses that ;).

narc0tic_bird ,

I was gonna ask if things like YubiKeys or even security chips inside smartphones were vulnerable to these sort of attacks, but apparently not, thanks for the heads up.

A_A OP ,
@A_A@lemmy.world avatar

i have doubts since, from the article, they were able to be : “bypassing the PIN verification for a cryptocurrency hardware wallet” … so i am waiting and looking for more sources and confirmations.

Prunebutt ,

Waiting for some MFer to use that shit to cheat it SM64 speedruns… or maybe a TASbot module. 🤔

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines