Thread

1. BitBangingBytes · 1789758122 · focus · HN ↗

   I appreciate all the details they provide in the post. The $250k in lab gear is useful when initially discovering, exploiting and documenting attacks like this.

   Definitely doable in a home lab for under $25k in equipment, likely under $10k.

   Same as my replicating Colin O’Flynn’s BAM BAM attack on a MPC5566 chip, he used a ChipShouter ($5,000) and I used a PicoEMP ($50).

   <a href="https:&#x2F;&#x2F;youtu.be&#x2F;URmI1VVilek" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;URmI1VVilek

   1. throwaway81523 · 1789764165 · focus · HN ↗

      Nice, thanks. I had wondered whether the $250K in lab gear is something that a serious HW security lab would already have on hand, as opposed to specialized expenditure for just this attack. I mean I rode in a $250K(?) motor vehicle a few days ago (the #2 SF Muni bus towards the Marina) but I didn&#x27;t have to spend a lot to ride it, since it was already deployed. Nobody had to go out and buy it.

      1. junofan · 1789798860 · focus · HN ↗

         Hah, our new ones are $1.3 million. <a href="https:&#x2F;&#x2F;www.sfmta.com&#x2F;media&#x2F;44081" rel="nofollow">https:&#x2F;&#x2F;www.sfmta.com&#x2F;media&#x2F;44081

         Perhaps driven by restrictions on federal grants? <a href="https:&#x2F;&#x2F;media.api.sf.gov&#x2F;documents&#x2F;Briefing_Book_-_Muni_Funding_Working_Group_-_October_2024_1.pdf" rel="nofollow">https:&#x2F;&#x2F;media.api.sf.gov&#x2F;documents&#x2F;Briefing_Book_-_Muni_Fund...

         Some cool tech. Wonder if we optioned the inductive charging system. <a href="https:&#x2F;&#x2F;www.gillig.com&#x2F;buses&#x2F;battery-electric&#x2F;#1731934845437-6ff757cd-619a" rel="nofollow">https:&#x2F;&#x2F;www.gillig.com&#x2F;buses&#x2F;battery-electric&#x2F;#1731934845437...

         1. laurencerowe · 1789841491 · focus · HN ↗

            Wow. Equivalent ones built in England are around 1&#x2F;3rd the price £350k = $470k.

            <a href="https:&#x2F;&#x2F;www.bbc.com&#x2F;news&#x2F;articles&#x2F;cjq45vw3n4go" rel="nofollow">https:&#x2F;&#x2F;www.bbc.com&#x2F;news&#x2F;articles&#x2F;cjq45vw3n4go

            1. 1attice · 1790010327 · focus · HN ↗

               Yeah but I bet the steering wheel is on the wrong side. ;)
   2. SV_BubbleTime · 1789783344 · focus · HN ↗

      I have an application on an SPC58 that I really want to know more about. But unfortunately; it’s a dual core with lockstep. So if it could be done; I think that automatically double-pluses the budget.

      1. BitBangingBytes · 1789825298 · focus · HN ↗

         Don’t need lasers for that chip, it absolutely can be done with enough time and effort.

         Don’t let fancy language like lock-step dissuade you from trying. The people who configured that chip also have to have done their job perfectly or it might still have a way in!

         1. SV_BubbleTime · 1789829328 · focus · HN ↗

            It’s two power supplies, two cores, lockstep, and an HSM they hype up… I’m pretty sure I would need two emps and a high precision rig at the minimum.

Unofficial Hacker News client; not affiliated with Y Combinator.