Start / The Amp Hour Electronics Podcast / 698 hardware security with matt brown

#698 – Hardware Security with Matt Brown

67 min • 17 juli 2025

Welcome Matt Brown of Brown Fine Security!

Matt has been reverse engineering a “smart” smoker controller that talks back to AWS IOT
Jeff Geerling talking about his dishwasher
Storing private keys on the device??
Threat models
Key rotation
What is the best case scenario for an IoT device?
Secure boot / trust zone
Keys encrypt flash storage
Chris has designed in the ATECC608 before
Replacing Certificate Authority (CA) cert in grill firmware
Matt has a Linux hardware / reverse engineering background
Flash is always external
Ghidra / idapro / binwalk
Security cameras are 99% linux based (battery based cameras might be embedded)
Best practices
Encrypted firmware
hidden uart / jtag
Keys
Are linux devices “worth more” to a security researcher?
CVSS risk scoring system
Attack vector
Vulnerabilities are better if it can be a remote executed
Linux devices have more compute
Bluetoothe LE
Ability to enumerate
Scale reverse engineering
Chris has discussed the silliness of a bluetooth toothbrush on the show before
Tools / Software of the trade
- xgeku firmware reader
- picoemp
- PCBite
- Saleae
- SDR USRP B200
- Universal radio hacker
Stick-to-it-ness
Matt just came back from hardwear.io, one of his new favorite conferences
Find Matt at the embedded systems village at DEF CON
Follow Matt via his YouTube channel
Matt has a new IoT Security newsletter starting up

Senaste avsnitt

#698 – Hardware Security with Matt Brown

Senaste avsnitt

#698 – Hardware Security with Matt Brown

#697 – LEDs Everywhere with Tim from Mitxela

#696 – It Works With Option Number 5

#695 – Making The Invisible, Visible with Sam Aldhaher

#694 – Voltage, Vibes, and VOCs

#693 – Small Scale Electronics Manufacturing with Colin O’Flynn

#692 – Like a steam engine in your house

#691 – System Designer Lets You Try Every Part with Michael Gielda

#690 – Clap on, clap off, lights flicker

#689 – A Jumperless Breadboard with Kevin Cappuccio

#688 – The Tandy Train

#687 – The RP2350 with the Raspberry Pi Team

#686 – A Benchtop Pick and Place with Stephen Hawes

#685 – Data Provenance in the Home, Server, and Fab

#684 – Lee Felsenstein: The Computer Revolution & Counterculture

#683 – Troubleshooting is the skill

#682 – Your Mind Is The Tool

#681 – Compact High Speed Design with Lukas Henkel

#680 – Catching Rockets with Musk Sticks

#679 – Satellite Design Engineering with Dan Esparon

#678 – All About Antennas with Katerina Galitskaya

#677 – Watt Is The Deal

#676 – Moving House (And Lab)

#675 – Changing Course with Shawn Hymel

#674 – Turtles as a Service

#673 – Lifelong Learning with Bitluni

#672 – Silicon Revolution with Matt Venn

#671 – NDA Sideshow

#670 – Engineering Careers with Circuit Break & James Lewis

#669 – Freelance PCB Design with Petr Dvorak

#668 – 50.0000 Ohms

#667 – Long Distance with CNLohr-a

#666 – Good Energy Citizen

#665 – Really long needle nose pliers

#664 – Simulating doors falling off

#663 – Motors on PCBs with Carl Bugeja

#662 – The non-Stinky Car

#661 – Blogging Electronics with Pallav Aggarwal

#660 – My Toothbrush Is Broadcasting

#659 – Altium…Acquired!

#658 – Uncle Al’s Eating Garbage Again

#657 – Automating the Home with Keith Burzinski

#656 – Pneumatic Tubes, Straight To The Home

#655 – The Twelfth Day of Keyzermas

#654 – Pseudo Code…Pseudo Good

#653 – Benjamin Cabé Nose Zephyr

#652 – For a couple weeks there…

#651 – Learning Computing with Jeff Geerling

#650 – Accessible ASICs with Andreas Olofsson

#649 – History of the Cathode Ray Tube with Kathy Joseph