Embedded systems security stuff. Perfect security does not exist, good enough security does.
South Holland, The Netherlands
Joined October 2018
- Tweets77
- Following73
- Followers223
- Likes52
Rafael Boix retweeted
Ladies and gentlemen, it is my honor to presenting you the Rolling-Pwn attack research on Honda Keyfob system. (rollingpwn.github.io/rolling…)
Rafael Boix retweeted
I made an overview of the tools which can be used to secure crypto implementations against physical attacks ileanabuhan.github.io/Tools/ Presentation is coming soon for #asiaccs. Work with @yuvalyarom @lejla_batina @pschaumont
It was a blast to see f2f all the amazing ppl & awesome research at #hw_ioNL2021 ! Demo gods were not nice(laptop worked after reboot when talk finished, see pic 🥲),but hope main idea was clear. If you have FI/SW exp questions or want to discuss anything: feel free to ping back!
Rafael Boix retweeted
In this #BHEU Briefing @jmartijnb shows how they gained root by inserting a malicious USB device that exploits a forgotten vulnerability in the USB stack of the Linux kernel, known as CVE-2016-2384. Learn more here: informatech.co/3lyMWS0
Rafael Boix retweeted
🔥Its now or never! ⏰Just 24 hours to go to grab your #Conference Tickets for #hardwear_io Netherlands 2021
😎Cracking Line of Speakers & What an opportunity to meet them
😉Few of them have already arrived at the venue👊
🎟️Get it here➡️bit.ly/3zDj2kA
#hw_ioNL2021
Rafael Boix retweeted
🔥#Speaker🎙️Talk Alert! #hardwear_io NL #Conference
⭐Rafael @rafabxc & Federico will show, how a combined Fault Injection (FI) + Software Exploit attacking approach can fully compromise the target system security domain
😎Get your tickets➡️bit.ly/3lGfB8R
#hw_ioNL2021
Rafael Boix retweeted
In the end of October, we are also attending the Hardwear.io in the Netherlands, where Riscure experts (🍩 Jasper van Woudenberg, Rafael Boix Carpi and Federico Menarini) have 2 presentations. Join the event with our discount code: welovefi.
Time to share the good news: Federico Menarini and I will be presenting some research results and insights about combined attacks (FI + SW exploitation) at #hw_ioNL2021 this October. Looking forward to the conference! hardwear.io/netherlands-2021…
Got some great news this afternoon, hopefully I can share more info in the next couple days! Stay tuned if you're interested in combined FI + logical attacks :)
ISO/SAE 21434 is finally published - amazing milestone for automotive security. It's also important to realize that it says "what" to do wrt security, but doesn't dictate "how" to do things: security is all about details, interesting & fun times ahead! iso.org/standard/70918.html
Rafael Boix retweeted
I wanted to write a small tutorial on perceived information and it’s application for side channel analysis. Instead I created a little monster of a blogpost. Hope it’s useful ileanabuhan.github.io/leakag…
Rafael Boix retweeted
🚗Get to know, what strong 🔒 security foundation in automotive products are required to design secure components
✅Join us for the Webinar with Rafael @rafabxc Principal Trainer & Security Specialist @Riscure bit.ly/2M6LXuL
#hardwaresecurity #AutomotiveSecurity
Rafael Boix retweeted
I will be talking about controlling program counter on RISC-V using fault injection. Register below if you are interested.
Two days.
Seventeen technical presentations.
One transformative workshop.
Still haven’t registered? There’s still time now! Click here to sign up: riscure.com/riscure-workshop…
Rafael Boix retweeted
We have published the second blog post by @rafabxc on automotive security and how to properly implement the best practices in your development environment. The story starts here: riscure.com/blog/justin-the-…
Preparing some baseline measurements for the research project I'll be supervising from next week. 2xEM probes (near field 1mm and 3cm) and 1xPower measurement, all measuring t-tables AES at the same time 😍
Rafael Boix retweeted
New whitepaper:
Security implications of accepting transactions on smartphones riscure.com/publication/secu…
Dear twitterverse: would you be interested in a cheat sheet on security terms on automotive standards and their meaning in each of those documents?