The Permanent ESP32 HW Exploit

 (twitter.com)

20 points | by kbumsik 1625 days ago

4 comments

  • ohazi 1624 days ago
    Disappointing that this appears rather easy, but hardware access usually means game over.
  • londons_explore 1624 days ago
    I think by now everyone is aware that you cannot defend hardware that you put in the hands of attackers.

    If this were a remote (ie. Via WiFi) attack, then we'd be talking...

  • kbumsik 1625 days ago
    I'm wondering, how many companies that use ESP32 actually use the firmware security feature?
    [-]
    • londons_explore 1624 days ago
      And how many of those encrypt their firmware just because the non-techy CEO thinks the firmware is worth $billions whereas a coder could reproduce firmware for an IoT widget in a few hours.
  • rowanG077 1624 days ago
    Not wireless, not practically interesting.