Why Some Chips Will Stay Vulnerable Forever | Joe Grand
Security Unfiltered PodcastOctober 17, 202600:10:56

Why Some Chips Will Stay Vulnerable Forever | Joe Grand

When a software bug gets disclosed, the vendor ships a patch. When the bug is in the silicon, the vendor has to respin the chip, and often just won't. Joe Grand (L0pht, Kingpin) and Joe South talk full disclosure from the L0pht days to now, what happened when he reported an STM32 issue and got no response, the one chip variant that quietly got fault injection mitigations, and why a vendor upselling you to a "secure" part doesn't make it secure.

Then the attack surface question: why "you'd need physical access" is not a security strategy, and how buying a decommissioned San Francisco smart parking meter on eBay turned into an attack on the live ones.

Full episode: FULL_EPISODE_LINK (paste the Thu Oct 15 watch URL once scheduled)
Joe Grand on YouTube: https://www.youtube.com/@JoeGrand
Joe Grand: https://joegrand.com/
Grand Idea Studio: https://grandideastudio.com/

Subscribe: https://www.youtube.com/@securityunfilteredpodcast
Show site: https://www.securityunfiltered.com

Affiliates
➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh
➡️ OffGrid Coupon Code: JOE

➡️ Unplugged Phone: https://unplugged.com/
Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout

*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.

Tesla Referral Code: https://ts.la/joseph675128

Follow the Podcast on Social Media!

Instagram: https://www.instagram.com/secunfpodcast/
Twitter: https://twitter.com/SecUnfPodcast
Joe Grand, Kingpin, security unfiltered, joe south, responsible disclosure,
Powered by Beamly