Our most recent blog peeks behind the scenes of our hardware security research - how custom PCBs & small-scale circuit assembly allows us to explore new attack surfaces. We hope that sharing this enables other people to learn from our tips-and-tricks: riverloopsecurity.com/blog/2…

Take a look at #ninjadiff, our newly released an open source binary diffing plugin for BinaryNinja! You can read about how it works and get it via riverloopsecurity.com/blog/2… Submit issues, pull requests, and give us feedback!!! Great work led by @TheWizard0f0dd CC @vector35

We recently shared some of our research on #hardware implants for the TPM bus - specifically FPGA decoding/modification on LPC bus TPMs. Come read a brief overview on what our team shared at #ieee PAINE. riverloopsecurity.com/blog/2…

We are proud to support Howard County General Hospital's Heros in Healthcare campaign during this time! youtu.be/-hSRyoGnuXk?t=422 Our team who tests medical devices for security issues has deep experience in health: designing medical devices, as clinical providers, & scaling EHRs.

Check out @krx__'s latest post on our Hardware Hacking 101 blog post series. He takes apart an Amazon Echo step by step and shows basic techniques for in-situ and chip-lift memory dumping for eMMC. riverloopsecurity.com/blog/2…

Interested in a simple introduction to hardware hacking? We've shared the first of a Hardware Hacking 101 series -- showing you step-by-step what UART is, how to find it, and how to interact with it -- to get a shell! Follow along at home with riverloopsecurity.com/blog/2….

Today we released Hashashin, a tool which combines basic block & graph aware hashing to allow porting #BinaryNinja annotations from one binary to another. Part 2 of our blog series shares the design decisions, where to get it on @github, & how to use it: riverloopsecurity.com/blog/2…

The second blog post in our series explaining #RF4CE & security is up at riverloopsecurity.com/blog/2…. It explains how RF4CE devices pair and how payloads are encrypted and protected - and some of the security problems with the protocol!

After a week of great "exclusively offense" thanks to @InfiltrateCon, we wanted to share an exclusively defensive tool that we think can help embedded developers use the (old) lessons-learned from SDL: riverloopsecurity.com/blog/2…

We're sharing our reactions to the @US_FDA guidance on premarket submissions for med device security (read: what is expected of device manufacturers). Largely positive, but some notes we feel are important. Read at riverloopsecurity.com/blog/2….

Given the recent news articles about hardware #implants - given our focus on #hardwaresecurity consulting, we've taken a step back from just the latest news and posted a few important points for those caring about #supplychain security to think about. riverloopsecurity.com/blog/2…

We're happy to often support users of @travisgoodspeed's awesome #GoodFET project - and recently we were getting some questions on #Kali installation. We've posted on our blog riverloopsecurity.com/blog/ to explain - and the steps should be useful to users of any modern Linux system

Check out our new blog about 3 trends we're seeing - specifically #1 is new research on how security can drive demand… and has measurable impact on the price a device manufacturer can charge. riverloopsecurity.com/blog/2…

Thanks to all who joined @embeddedsec and @rmspeers for their presentation @BlackHatEvents #BlackHat2018 Arsenal the other week. We were glad to see the interest in the tool and hope people find it useful. Let us know how you use it or if you run into any issues!