Delayed attacks against Realtek chips you'll find everywhere

You Gotta Hack That

Player FM - Internet Radio Done Right

تمت الإضافة منذ قبل two أعوام

المحتوى المقدم من You Gotta Hack That. يتم تحميل جميع محتويات البودكاست بما في ذلك الحلقات والرسومات وأوصاف البودكاست وتقديمها مباشرة بواسطة You Gotta Hack That أو شريك منصة البودكاست الخاص بهم. إذا كنت تعتقد أن شخصًا ما يستخدم عملك المحمي بحقوق الطبع والنشر دون إذنك، فيمكنك اتباع العملية الموضحة هنا https://ar.player.fm/legal.

Exile

1
Episode 10: From Refugee to Radical 44:09

منذ 2 years44:09

التشغيل لاحقا

قوائم

إعجاب

احب

44:09

When a young Eva Kollisch arrives as a refugee in New York in 1940, she finds a community among socialists who share her values and idealism. She soon discovers ‘the cause’ isn’t as idyllic as it seems. Little does she know this is the beginning of a lifelong commitment to activism and her determination to create radical change in ways that include belonging, love and one's full self. In addition to Eva Kollisch’s memoirs Girl in Movement (2000) and The Ground Under My Feet (2014), LBI’s collections include an oral history interview with Eva conducted in 2014 and the papers of Eva’s mother, poet Margarete Kolllisch, which document Eva’s childhood experience on the Kindertransport. Learn more at www.lbi.org/kollisch . Exile is a production of the Leo Baeck Institute , New York | Berlin and Antica Productions . It’s narrated by Mandy Patinkin. Executive Producers include Katrina Onstad, Stuart Coxe, and Bernie Blum. Senior Producer is Debbie Pacheco. Associate Producers are Hailey Choi and Emily Morantz. Research and translation by Isabella Kempf. Sound design and audio mix by Philip Wilson, with help from Cameron McIver. Theme music by Oliver Wickham. Voice acting by Natalia Bushnik. Special thanks to the Kollisch family for the use of Eva’s two memoirs, “Girl in Movement” and “The Ground Under My Feet”, the Sophia Smith Collection at Smith College and their “Voices of Feminism Oral History Project”, and Soundtrack New York.…

منذ عامين 16:06

MP3•منزل الحلقة

Felix discusses the supply chain issues that allow attackers to take their time when taking advantage of embedded systems. The vulnerabilities discussed are for the Realtek RTL819xD chip and have IDs CVE-2021-35392, CVE-2021-35393, CVE-2021-35394, and CVE-2021-35395. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com

22 حلقات

#Tech #Internet Of Things #Hacking #Penetration Testing #Embedded Security #Industrial Control Systems #Cyber Security #Cyber Assurance #Operational Technology #Ot Security #Higher Education #Podcasting Education #Gotta Hack #IoT #Test

You Gotta Hack That

Delayed attacks against Realtek chips you'll find everywhere

You Gotta Hack That

published منذ عامين

MP3•منزل الحلقة

22 حلقات

Tutti gli episodi

You Gotta Hack That

1
Attacking Santa's Christmas deliveries 19:47

منذ 11 weeks19:47

19:47

Felix and Alex discuss the attack surface and disruption opportunities for a Cyber attack against Santa's Christmas delivery schedule.

You Gotta Hack That

1
Railways and trains 21:02

منذ 1 year21:02

21:02

Most people think of trains and railways as being great big lumps of metal that (hopefully) whizz along long shiny tracks, but it turns out they are incredibly complex and have a broad attack surface! Email Felix using helpme@yg.ht Find You Gotta Hack That on X @gotta_hack

You Gotta Hack That

1
Vulnerability research into SolaX Inverter Smart Connectivity 15:37

منذ 1 year15:37

15:37

Felix describes research completed against the SolaX Pocket WiFi module that connects SolaX inverters to the Internet for smart connectivity features. The research highlights some of the challenges experienced by researchers and developers alike as well as the risks that these vulnerabilities present. Email Felix using helpme@yg.ht Find You Gotta Hack That on X @gotta_hack…

You Gotta Hack That

1
Cars 16:46

منذ 1 year16:46

16:46

In this episode Felix looks at the complexities and attack surface of modern cars. They may have become more sophisticated but are they now technologically fragile? Email Felix using helpme@yg.ht Find You Gotta Hack That on X @gotta_hack

You Gotta Hack That

1
Prosthetics 12:36

منذ 2 years12:36

12:36

Felix analyses the security within modern smart-prosthetics and medical tech to help prevent the need for amputations. The security need behind these two devices is not always immediately apparent because some people might think of it as being 'boring medical data'. Cyber security concerns are still there none-the-less, just in a slightly different form. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack…

You Gotta Hack That

1
Medical Imaging Devices 22:01

منذ 2 years22:01

22:01

Felix delves in the technology that supports MRI scanners, X-Ray machines and CT scanners and looks at the vulnerabilities they have had in the past as well as potential opportunities for them to fall foul of attackers. The technology here focuses on the DICOM and HL7 protocols both of which have had security concerns but are used globally to ensure doctors remain connected to their patients medical images. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack…

You Gotta Hack That

1
Wearable Tech 20:25

منذ 2 years20:25

20:25

Wearable tech is increasingly popular with consumers worldwide. It's become a class of tech that is so ubiquitous that privacy and cyber security concerns have to be taken seriously. In this episode we look at the Bluetooth Low Energy (BLE) protocol which makes the vast majority of this technology possible. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack…

You Gotta Hack That

1
Continuous Glucose Monitors (CGMs) 15:22

منذ 2 years15:22

15:22

In this episode Felix investigates Glucose Monitors. He looks at their cyber security profile and discusses Near Field Communications (NFC) which is a commonly used protocol to communicate between smart phones and the little device. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack…

You Gotta Hack That

1
Insulin pumps 20:36

منذ 2 years20:36

20:36

Felix looks at the slightly murky history of the cyber security behind insulin pumps. These devices have a bad security reputation, but, it isn't that straight forward. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack

You Gotta Hack That

1
Pacemakers 17:22

منذ 2 years17:22

17:22

Pacemakers are surprising prevalent and have been around for years. These devices keep people alive but have a difficult cyber security history. Felix looks at how these devices work and what security challenges they face. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com…

You Gotta Hack That

1
The IoT and embedded systems penetration testing process 25:44

منذ 2 years25:44

25:44

Felix discusses what makes a good penetration testing process, the difficulties that are unique to the Internet of Things and embedded systems, and how best to approach getting good security assurance. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com…

You Gotta Hack That

1
CCTV systems 15:29

منذ 2 years15:29

15:29

CCTV systems have a bad reputation when it comes to cyber security. Felix looks at the attack surface of CCTV systems and discusses how these systems are more complex than most people realise and how that results in them being abused. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com…

You Gotta Hack That

1
Occupancy Sensors 14:26

منذ 2 years14:26

14:26

Felix looks at the types of Occupancy Sensors typically used in lighting management and intruder alarm systems. The most common sensor type is the Passive Infra Red (PIR) sensors. These are primitive in some ways but very sophisticated in others. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com…

You Gotta Hack That

1
Fire detection and response systems 13:42

منذ 2 years13:42

13:42

Felix looks in depth at the cyber security implications of fire systems in modern buildings. This particularly focuses on the BACnet protocol - a common element of modern open-protocol systems. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com

You Gotta Hack That

1
Lifts (Elevators) and Escalators 20:06

منذ 2 years20:06

20:06

It is easy to take lifts and escalators for granted, but it turns out that modern versions have a huge amount of connectivity. We delve into all this tech and focus on one type of communications used in modern lilfts and escaltors, called ModBus. We discuss how ModBus might be attacked, especially when thinking about all the other technologies that are also now connected to these systems. Email Felix using helpme@yg.ht Find You Gotta Hack That on Twitter @gotta_hack yougottahackthat.com…

مرحبًا بك في مشغل أف ام!

يقوم برنامج مشغل أف أم بمسح الويب للحصول على بودكاست عالية الجودة لتستمتع بها الآن. إنه أفضل تطبيق بودكاست ويعمل على أجهزة اندرويد والأيفون والويب. قم بالتسجيل لمزامنة الاشتراكات عبر الأجهزة.