Comment by stackghost
17 hours ago
> The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.
Not super practical, but neat attack
17 hours ago
> The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.
Not super practical, but neat attack
250k is not a bad investment for a company doing "reverse engineering as a service" - say 1k a pop to extract the firmware. Naturally, a good business idea for somewhere in the world with less regulations...
That is peanuts for a nation-state actor.
Sure, but if you’re defending against a nation state actor hopefully you aren’t expecting a raspberry pi to keep you secure.
> Sure, but if you’re defending against a nation state actor hopefully you aren’t expecting a raspberry pi to keep you secure.
Is there anything about these techniques that are raspberry pi specific? It seems like they're using lasers to identify and flip particular bits in registers.
16 replies →
The RP2350 is an inexpensive microcontroller IC with reasonable performance and some very useful (and somewhat unusual) features in its PIO blocks.
Why wouldn't a person build that into the heart of something important?
5 replies →
Some people have such and other toys just at work and can use it in spare time.
> $250,000 of laboratory equipment
*currently
$300,000 next year.
Llms should make these cost even less im thinking $50 in 18 months?
In 5 years, either $400,000 or $50 and a hammer, depending on whether the core piece of the process aligns with the needs of some fast-growing consumer tech product like e.g. drones.
7 replies →
We're already up to 400,000 just today.
It reads as impressive defense. Meaning that it's presumably not possible to get root with physical access on a live 50$ device without 250k capital
This is for a $1 microcontroller. I'm assuming you're talking about the Raspberry Pi computers based on the $50 cost and root.