‹ BackHN Continuity

Thread

Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug

220 points · 92 comments · synack

  1. stackghost · · focus · HN ↗
    > The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.

    Not super practical, but neat attack

    1. stickfigure · · focus · HN ↗
      That is peanuts for a nation-state actor.
      1. crote · · focus · HN ↗
        Most attackers aren't nation states, and your security shouldn't rely on obscurity anyways. Having to attack each individual device and having to get specialized equipment to do a highly-skilled attack breaks the vast majority of attack scenarios.

        This isn't Hollywood. What actually matters to companies is that some 15-year-old with a Flipper Zero can't trivially break your printer ink DRM scheme, and that your debit card can't be cloned without leaving plenty of evidence.

        Worried about nation-state attacks? Then don't rely solely on sub-$1 hobbyist-level chips for your security!

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.