hardware hack

Joe Grand recounts being hired to hack a Trezor One hardware wallet and recover $2 million of cryptocurrency. He describes three months of experimentation, voltage glitching, failures and high-stakes attempts with only one chance to get it right.

Mike of mikeselectricstuff shows his heavily modified old BBC Micro system in a 28-minute tour of 8-bit hardware archaeology.

The Mentor (Loyd Blankenship) reads his 1986 essay "The Conscience of a Hacker" at H2K2 in 2002 and adds his own insight about its backstory.

The BotHack NetHack bot wins the game for the first time with no cheats or human intervention, in a run lasting about 3.5 hours. The description links the source code and the dumplog.

Tom Murphy (suckerpinch) shows 'reverse emulation', using a Raspberry Pi in an NES cartridge to give an unmodified NES new abilities such as playing SNES games. The video starts in a strange way and gets stranger.

Ben Krasnow of Applied Science explains how electrophoretic e-paper displays work and how he modified the driver firmware and waveform lookup tables of a 4.2-inch panel to reach roughly 3Hz partial refresh. It covers the tweakable constants in the refresh process and touches on colored e-ink microcapsules.

William Osman describes helping build parts of the MrBeast Squid Game event, including hacking together hundreds of wifi-controlled blood packs in about three weeks. He covers the chaos and near-failures along the way.

Strange Parts spends four months, seven custom circuit boards and several disassembled iPhones adding a working headphone jack to an iPhone 7 in China. The build is documented in detail.

A 33c3 talk by marcan on reverse engineering the PS4 hardware to run Linux with 3D acceleration. It covers how the console differs from a PC and includes a story about tunneling PCIe over RS-232.

A look inside Dr Abrasive's lab as he engineers a flash-card replacement for the Sega Saturn optical drive after cracking its CD protection 20 years on.

A 35C3 talk presenting a proof-of-concept SPI bus hardware implant with capabilities like those alleged in the Bloomberg Supermicro story, plus countermeasures for detecting such modchips.

CNLohr explains how he made an ESP32 produce valid LoRa packets without a LoRa radio, using aliasing and clever signal tricks. It walks through the RF math and shows how far the signals reach.

Christopher Domas presents research at DEF CON 26 showing a hidden alternate instruction set and undocumented hardware backdoor in some x86 processors, found on a third-party CPU. He uses it to ask how feasible wider hardware backdoors are.

Owen Maitzen's animated hour-long introduction to Hackenbush, a simple combinatorial game, and how its strategy leads to surreal numbers and the roots of the number system.

Christopher Domas's Black Hat talk demonstrates a hardware backdoor in a third-party x86 processor, a hidden core that grants root from userland. He uses it to discuss how feasible broader hardware backdoors might be.

Craig Heffner's Black Hat 2013 talk on exploiting network surveillance cameras, covering how insecure their firmware is. It shows how easily such devices can be compromised.

A PyCon 2012 talk by Kurt Grandis on building an automated water-squirting turret that uses Python and computer vision to detect and drive off squirrels from a bird feeder.

Google engineer Dany Qumsiyeh presents a prototype automatic, non-destructive book scanner that turns pages and captures high-resolution images, built in Google's workshops. The talk includes a live demo and a short technical overview.

John Sotos, a physician and former Intel chief medical officer, argues at DEF CON 25 that genetic diseases are exploitable vulnerabilities in the genome. He warns that CRISPR and related tools will make malicious genome hacks and targeted bioweapons feasible.

Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor. The goal was to make any hardware attack cost more than the price of many games.

Andrew "bunnie" Huang examines how realistic hardware supply chain attacks are, from rogue insiders to nation states, in the wake of the Bloomberg Businessweek report. He explains how undocumented components could be hidden on boards and how hard they are to spot.

A 57-minute account of Clifford Stoll's tracking of a KGB-linked hacker through Lawrence Berkeley Lab computers in 1986, the story of The Cuckoo's Egg. It covers the FBI and Chaos Computer Club involvement.

Jonathan Schiefer interviews Larry Wall, creator of Perl, in a 33-minute conversation. Wall discusses his self-designed linguistics degree and how language and programming overlap.

Louis Rossmann, a Macbook repair shop owner, goes through a long list of Apple hardware engineering failures, from GPU defects to keyboards and repair practices.

The fail0verflow team (bushing, marcan, sven) present console hacking at 27C3, covering Wii, Xbox 360 and PS3 exploits. They explain how the PS3 was cracked after Sony removed Other OS.

A DEF CON 23 talk by Marc Rogers and Kevin Mahaffey walking through the architecture of the Tesla Model S, what Tesla got right and wrong, and how the interconnected systems can be hacked. It also covers the data the car collects.

C-SPAN footage of the L0pht hacker collective testifying before the US Senate Governmental Affairs Committee on May 19, 1998. The members discuss internet and computer security weaknesses. The uploader says the media remembered only the claim that they could take down the internet in 30 minutes.

Ben Eater explains how VGA signals work and builds a breadboard circuit that produces correct sync timing so a monitor recognizes the signal. He then builds toward displaying an image from simple logic chips.

Marco Reps builds and tests an open-source 8.5 digit voltmeter based on CERN's high-precision ADC design. The video walks through assembly, soldering and measurement of the resulting instrument.

Ben Eater explains how the PS/2 keyboard interface works, covering its clocked serial protocol and scancodes. He builds up the hardware-level understanding needed to read keypresses.

Theo de Raadt presents pledge, a new OpenBSD security mechanism that kills processes which exceed the system calls they declared they need. The talk was given late at night at Hackfest 2015.

In Ars Technica's War Stories, Naughty Dog co-founder Andy Gavin explains how the team squeezed Crash Bandicoot onto the original PlayStation. They overwrote Sony library code in RAM, built custom animation compression, and streamed assets around slow seek times.

A recording of the TASBot block at Awesome Games Done Quick 2017, where a robot plays games via tool-assisted speedruns, including Super Mario 64 and Portal on an SNES via arbitrary code execution, and ending with a Twitch Plays segment. It showcases console exploits and creative hardware hacking.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.

Loopop reviews the Polyend Tracker hardware tracker-style sequencer and walks through a tutorial from sampling to finishing a song. It covers most of the device's features.

Ben Eater starts a series building a working computer on breadboards around the 6502 microprocessor. In this first part he gets a 'hello world' running from scratch.

Ben Eater explains how a USB keyboard communicates, covering the electrical interface, bit and packet encoding, packet contents, and a comparison with PS/2.

Zack Freedman introduces Gridfinity, his free, open-source modular workshop storage system of 3D-printable bins and baseplates. The video walks through the design, the parametric templates and the many module types that fit parts, tools and accessories.

Karsten Nohl and Jakob Lell present BadUSB at Black Hat 2014, showing that USB controller firmware can be reprogrammed to impersonate other device types. They demonstrate system compromise and a self-replicating USB threat that current defenses cannot detect.

Tom7 (suckerpinch) builds and evaluates a series of absurd hard drives, including storage made from ping packets across the internet. The video accompanies his paper and mixes deep technical hacking with comedic storytelling.