~/talk

How to Hack Any Micro-controller with a Raspberry Pi Pico…

Talkat CODE BLUE 2025 · 2025-11-18..11-19· [embedded-and-hardware, security]
links:none on file
slides:none on file

A cheap setup uses a Raspberry Pi Pico plus two high‑speed switches, a probe resistor and a logic analyzer/oscilloscope to perform precise voltage glitching timed by a record-and-replay of debugger traffic, avoiding writing a device driver. The method pinpoints a critical handshake, flips the Pico PIO for ~16 ns spikes and 150–400 ns effective glitches, and repeatedly injects until success; it repeatedly dumps firmware from an RO78 target, with higher success when undervolting or slowing the link.

AI-written summary · about

  1. 0:00Introduction
  2. 1:09Fault injection attacks
  3. 3:59Precise voltage glitching
  4. 6:10Real-world trigger acquisition
  5. 8:20Driver implementation challenges
  6. 11:32Record and replay approach
  7. 15:30Isolating bidirectional signals
  8. 18:22Recording analog signals
  9. 20:29RO78 chip attack
  10. 24:04Hardware details
  11. 27:13Precise glitches with Pico
  12. 29:20Attack workflow
  13. 31:48Summary
  14. 33:17Boot sequence exploits
  15. 37:00Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.