Hardwear.io USA 2023
2023-05-30..2023-06-03
Santa Clara, United States
[hardwear.io USA 2019, Hardwear.io USA 2023, Hardwear.io USA 2024, Hardwear.io USA 2026]
| title | author | length |
|---|---|---|
| The Misuse Of Secure Components In Hardware Wallets | Michael Mouchous, Karim Abdellatif | 43m |
Full hardware audit of a OneKey wallet shows concrete, unfixable failures: the pairing key ends up stored in STM32 OTP and is extracted via a homemade EMFI on… | ||
| Back To The Future With Platform Security | Enrique Nissim, Joseph Tartaro, Krzysztof Okupski | 53m |
Finds and demonstrates concrete AMD platform failures: unlocked SMRAM on an Acer Swift 3 and other models, SPI flash misconfigurations that allow host… | ||
| "Un-fare Advantage” - Hacking The MBTA CharlieCard From 2008 To Present | Bobby Rauch | 36m |
Claims a phone plus cheap gear can: repeatedly refill a CharlieCard without paying, get replacement cards mailed without payment, provision new paid cards, and… | ||
| Keynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See | Rodrigo Rubira Branco | 51m |
Firsthand account of microarchitecture security shows concrete failures and fixes: proof‑of‑concept exploits and microcode reverse engineering expose… | ||
| Benchmarking The Static Power Vulnerability Of Four CMOS Generations | Thorben Moos | 42m |
Custom ICs in 90nm, 65nm, 40nm, 28nm chips host identical AES-128 cores and undergo controlled static-power side‑channel measurements using a climate chamber… | ||
| Next-Gen Exploitation: Exploring The PS5 Security Landscape | Specter | 30m |
Compares PS4-era chains (USB xattr truncation leading to kernel OOB and full jailbreak via a crafted USB image) with PS5’s tightened model: enforced SMAP and… | ||
| Cryo-Mechanical RAM Content Extraction: A DIY Cold Boot Robot For A Thousand Bucks | Ang Cui | 34m |
A DIY robot extracts decrypted DDR1/2/3 RAM by mechanically lifting cold chips and reading them on an FPGA-compatible board, achieving stable data retention at… | ||
| Inside Apple's Lightning: JTAGging The IPhone For Fuzzing And Profit | Thomas Roth | 30m |
Reveals a working open source Lightning JTAG adapter built on a Raspberry Pi Pico and called Tamarind cable, implements SDQ/IDBUS in PIO, and drives SWD over… | ||
| BreakMi: Reversing, Exploiting & Fixing Fitness Tracking Ecosystems | M. Casagrande, D. Antonioli | 42m |
Reverse engineering finds Xiaomi trackers since 2016 use vendor‑specific application protocols over BLE with link‑layer security disabled, and authentication… | ||
| How To Hack Shannon Baseband (from A Phone) | Natalie Silvanovich | 42m |
Project Zero shows remote exploitation of the Samsung Shannon Exynos 5300 baseband used in Pixel 7 by combining firmware dumps, IDA analysis, a QEMU-like… | ||
| Affordable EMFI Attacks Against Modern IoT Chips | Davide Toldo | 30m |
An accessible EMFI rig is reproducible from cheap parts: a Digilent CMOD A7 running the chip.fail bitstream for 2.5 ns timing, an affordable pulser… | ||
| Exploring chip decaping techniques for silicon die inspection and reverse engineering | Antoine Bercovici, John McMaster | 03m |
Compares practical decapping approaches and demonstrates a workshop where participants use hot air to expose clean silicon dies for ROM decoding and reverse… | ||
| Red Team Vs. Blue Team | Endres Puschner, Steffen Becker | 24m |
A public case study compares four real chips (90, 65, 40, 28 nm) by imaging backside layers with a scanning electron microscope (≈300 GB uncompressed per die)… | ||
| Securing The Unseen: Vulnerability Research In Confidential Computing | Josh Eads, Cfir Cohen | 52m |
Google’s audits of AMD SEV‑SNP and Intel TDX find dozens of vulnerabilities, many fixed before launch, and publish detailed reports. Specifics include a fixed… | ||
| nothing matches | ||