5 comments

  • jacquesm 1 hour ago
    That's reminiscent of when we first found out that if you opened up dram chips you could use them for imaging. Of course the scale at which this is done is extremely impressive.
  • stackghost 1 hour ago
    > The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.

    Not super practical, but neat attack

    • mrlambchop 1 hour ago
      250k is not a bad investment for a company doing "reverse engineering as a service" - say 1k a pop to extract the firmware. Naturally, a good business idea for somewhere in the world with less regulations...
    • stickfigure 33 minutes ago
      That is peanuts for a nation-state actor.
      • stackghost 17 minutes ago
        Sure, but if you’re defending against a nation state actor hopefully you aren’t expecting a raspberry pi to keep you secure.
        • ssl-3 4 minutes ago
          The RP2350 is an inexpensive microcontroller IC with reasonable performance and some very useful (and somewhat unusual) features in its PIO blocks.

          Why wouldn't a person build that into the heart of something important?

          • sephamorr 1 minute ago
            "Important" and "tamper proof against a determined adversary" are very different goals.
    • _trampeltier 1 hour ago
      Some people have such and other toys just at work and can use it in spare time.
    • paulnpace 1 hour ago
      > $250,000 of laboratory equipment

      *currently

      • stavros 27 minutes ago
        $300,000 next year.
        • TeMPOraL 7 minutes ago
          In 5 years, either $400,000 or $50 and a hammer, depending on whether the core piece of the process aligns with the needs of some fast-growing consumer tech product like e.g. drones.
        • k12sosse 7 minutes ago
          We're already up to 400,000 just today.
    • TZubiri 29 minutes ago
      It reads as impressive defense. Meaning that it's presumably not possible to get root with physical access on a live 50$ device without 250k capital
  • brcmthrowaway 28 minutes ago
    Now it can be done for Apple iPhone. Apple is cooked.
  • Fred27 1 hour ago
    There's always an XKCD... https://xkcd.com/538/
    • orbital-decay 57 minutes ago
      It needs to be updated. Modern evil planners don't even need a wrench since they already have most keys given to them in advance by everyone, including nerds
      • junon 21 minutes ago
        Care to expand?