Our most recent blog peeks behind the scenes of our hardware security research - how custom PCBs & small-scale circuit assembly allows us to explore new attack surfaces. We hope that sharing this enables other people to learn from our tips-and-tricks: riverloopsecurity.com/blog/2…

Team member @krx__ shares his journey of deep technical analysis and recovery of Huawei EchoLife flash memory analysis. riverloopsecurity.com/blog/2…

Our final installment of the HW 101 JTAG blog post series is out - we cover how to communicate with a target device via JTAG once the pinout has been identified. OpenOCD & GDB step-by-step on a real system. Take a look! riverloopsecurity.com/blog/2…

... we're excited that our team will be "sharing the design for this port with DOE, vendors, and other community leaders to jumpstart a discussion on what additional tools are needed to properly equip grid response teams." 3/3

... using this "authorized users can perform ... memory validation and forensic imaging without compromising vendor IP or a utility’s proprietary information." - a key item which we spent significant design and cryptographic engineering effort on! 2/3

Yes, we do! We're working to be able to make more info public, and will aim to release slides (which include a TPMGenie shoutout for the prior work in I2C!). We would defer to the conference on if they release video.

Yes, there is an internal py3 branch that has had a lot of work pending release. I'll ask the developer to push it out to a branch for you.

Check out CVE-2020-13995, found by our team member @cyberingcc! Great work applying some new tooling and lessons from research we developed to find a number of issues within an implementation of the US NITF (overhead imagery format) specification. See riverloopsecurity.com/blog/2…

As part of our work using binary instrumentation and static analysis to understand parsers’ de facto file format specifications, @cyberingcc found parts of the spec which are likely to lead to implementation errors and vulnerabilities. riverloopsecurity.com/blog/2…

A well segmented (security) architecture is difficult when designed from the start - and even tougher to do after-the-fact along with an acquisition transaction. Take a look at reuters.com/article/us-usa-t… - only the tip of the iceberg of work to do. @Reuters @Microsoft @tiktok_us

Check out the great work by our friends at @grimmcyber (Adam Nichols, et al) which expanded on the analysis we did of the DJI Mimo app to look at some of the same issues (and others) in the DJI GO 4 app. riverloopsecurity.com/blog/2… blog.grimm-co.com/2020/07/dj…

We are proud to support Howard County General Hospital's Heros in Healthcare campaign during this time! youtu.be/-hSRyoGnuXk?t=422 Our team who tests medical devices for security issues has deep experience in health: designing medical devices, as clinical providers, & scaling EHRs.

Check out a post we co-wrote with some teammates about tooling used to find modifications hidden in parsers as part of @sergeybratus's DARPA #SafeDocs project! @rmspeers @pli888 @Calaquendi44 @mlocasto riverloopsecurity.com/blog/2…

A nice proof of concept from @cyberingcc -- a use of FUSE for helping harness fuzzing - this should be a framework that others can build on to add different permutation generators/etc. Proud to have a team doing innovative work, and sharing it with the community!

Although we would have loved to present in person, we're glad that some of our team can still support the conference remotely! #hardwear_io @riverloopsec

Thanks to @nullcon for hosting @rmspeers to talk about some of our work using program analysis to greatly increase efficiency and coverage in looking for vulnerabilities in embedded devices! A great conference and audience. #nullcon2020

Check out @krx__'s latest post on our Hardware Hacking 101 blog post series. He takes apart an Amazon Echo step by step and shows basic techniques for in-situ and chip-lift memory dumping for eMMC. riverloopsecurity.com/blog/2…

Our Hardware Hacking 101 - Interfacing with SPI devices is now up at riverloopsecurity.com/blog/2…. Follow it for a walkthrough of what SPI is, how the pins and timings work, and how you can use different tools to talk to SPI devices to dump firmware, etc.

Was a great time and a lot of fun to chat with @securityweekly! Hours flew by!