SlideShare une entreprise Scribd logo
1  sur  56
HARDWARE 
Mark Wong 
10th October 2014 
hacking101 
www.omgbazinga.com
DISCLAIMER 
While the following has been conscientiously researched. 
Neither the organizers nor the author will accept any 
liability if you render your device inoperable as a result of 
these instructions. Proceed at your own risk. DO attempt 
these experiments, tests, trials, or any activity in this 
presentation at home, work, or anywhere else for that 
matter. Have fun, gain more experience and knowledge, 
be safe and use common sense!
WHAT WE DO
WHAT WE DO
HAQDLOFU-ALOIKFME
233 MHz 
Pentium 
w/ MMX
So the learning journey begins…
1997 
Evolution of my Rigs 
SMOOTHER 
GAMES 
1999 
2002 
2004 
2006 
2008 
2009 
2012 
Coming 
soon 
2015 
Pursuit of 
No $?
How does hardware affect 
me? 
HARDWARE 
ROCKS
iB Secure Device token 
UNLOCKS YOUR 
MONEH
Coin 
Cell 
Battery 
Epoxied resin IC die “Chip-on-board”, ‘glob-top’ 
Button contacts 
Infineon BC857BL3 
PNP transistor 
Assorted SMD 
resistors 
Test / 
programming 
pads 
Manufacturer 
information 
silkscreen 
32.768kHz Ceramic Crystal Oscillator 
LCD junction pads
Technical Specifications 
• Weight: 14 grams 
• Dimensions: 9.8 x 25.9 x 
62.7mm 
• Display: 8-characters LCD 
• Keypad: one-button 
• Real-time clock to 
provide time value to 
DIGIPASS algorithm 
• Supported crypto 
algorithm: DES, 3DES and 
AES, DIGIPASS time and 
event based 
• OATH event (HOTP) or 
time (TOTP) 
• Battery: non-replaceable, 
lifetime expectancy 7 
years 
https://www.vasco.com/products/client_products/single_button_digipass/digipass_go6.aspx
What have we learnt? 
OATH - Initiative for Open 
AuTHentication 
HOTP: An HMAC-Based One-Time 
Password Algorithm (RFC 4226) 
Supports: TOTP -Time-Based One- 
Time Password Algorithm (RFC 
6238) 
Standards set by: Internet 
Engineering Task Force (IETF) 
Then HOTP(K,C) is mathematically defined by: HOTP(K,C) = Truncate(HMAC(K,C)) & 0x7FFFFFFF 
K is a secret key, C is a counter key 
For HOTP to be useful for an individual as a system input, result must be converted into a HOTP 
value, (6–8 digits number) where HOTP-Value = HOTP(K,C) mod 10d, d is the desired number of digits 
http://en.wikipedia.org/wiki/HMAC-based_One-time_Password_Algorithm 
http://www.sourcemediaconferences.com/CTST09/PDF09/D/Tuesday/BajajSiddharth.pdf 
http://www.globaleventspanama.com/clab2010/files/conf_donald_malloy.pdf
Somebody already hacked it! 
https://http://blog.valverde.me/2014/01/03/reverse-engineering-my-bank%27s-security-token/#.VCIywxbgzgU
https://www.youtube.com/watch?v=k87vSrfhof4
What can I do with what I’ve learnt? 
The “stuff” Who makes it? How 
did they do it? 
Learn everything 
about it, try it. 
Learn about 
cryptography 
Learn about 
low-cost 
manufacturing 
or electronic 
packages 
Make your own 
crypto-key 
generator 
Be happy 
having learnt 
something 
 
http://www.empf.org/empfasis/dec04/improve1204.htm 
http://www.digikey.com/catalog/en/partgroup/avr-cryptocontroller/32031 
http://www.maximintegrated.com/en/products/digital/microcontrollers/MAXQ1010.html
How do I 
Start?
Tools of the trade 
Screwdriver. Multi-meter. Pliers. Cutters.
What the heck hack is 
inside 
IT?
HOW DOES A CAR 
WORK? 
HOW DOES YOUR EZ-LINK 
WORK?
If you don't know how things work, 
how can you design interfaces with 
dreams to change the 
world? 
How do you improve something if you 
don't know how it works?
Build. Fail. 
Rebuild. 
Results. 
Outcome. 
Find out 
How? 
Why? 
System 
design / 
Adoption 
Hardware 
Lifecycle 
Summary 
3-stage Block diagram
Teardowns!!!
BOM (Bill of Materials), Datasheets
https://www.ifixit.com/Teardown/iPhone+6+Teardown/29213 
http://www.techinsights.com/teardown.com/apple-iphone-6/
• ultra-small (2mm x 2mm) 
– WOW! 
• Tri-axial 
• Measurement of 
accelerations in 3 
perpendicular axes 
• Senses tilt, motion, shock 
and vibration 
- Low power consumption 
of 130 μA – NICE!
Don’t be 
afraid to blow 
things up
Online Resources 
Complexity 
& Ability 
Time
3-stage Block diagram 
Controller / 
Process / 
Decision 
Measurement 
/ Input 
Outcome
Input 
•Keyboard 
• Sensor 
• Touch screen 
Process 
• Processor 
•Microcontroller 
• Signal 
conditioning 
•Analog-to-digital 
Converter 
•Application 
software / 
firmware 
Output 
• LEDs 
• Screen 
•Sound 
Design your system
The good ‘Ol days
Today’s 
Platforms
Apollo Guidance Computer (AGC), 1966 
16-bit, 55Watts 
<1MIPS, 4K RAM, 32K ROM, 8 GPIO 
1.024 Mhz 
31 kilograms 
$15 Million 
Arduino UNO platform, 2009 
8-bit Atmel atmega ATmega328 
20MIPS, 2K RAM, 32K ROM, 14 GPIO 
16Mhz 
27 grams 
$20
Hardware platforms change 
all the time. The key is 
quick adoption.
Diodes 
Boring. 
Not Fun. 
http://startingelectronics.com/beginners/components/LED/ 
http://dangerousprototypes.com/docs/Basic_Light_Emitting_Diode_guide
What does it 
• ONE WAY VALVE 
• PLUS (+) and 
MINUS (-) 
• Makes pretty 
lights 
do?
What are you 
gonna make?
Iterative prototyping
Learning Curve 
Complexity 
& Ability 
I kick-ass 
 
 
Valley of despair – “who’s dumb idea is this” 
Can’t live without! 
Time 
Increase in 
skills 
Associative 
stage 
Autonomous 
stage 
GOD-LIKE 
Trial & Error 
Cognitive stage ‘I suck’ threshold
Mark.wong@omgbazinga.com 
@fusion2x 
@fusion2x

Contenu connexe

Tendances

Esp32 cam arduino-123
Esp32 cam arduino-123Esp32 cam arduino-123
Esp32 cam arduino-123Victor Sue
 
Making and breaking security in embedded devices
Making and breaking security in embedded devicesMaking and breaking security in embedded devices
Making and breaking security in embedded devicesYashin Mehaboobe
 
Arduino i rremote 1112
Arduino i rremote 1112Arduino i rremote 1112
Arduino i rremote 1112馬 萬圳
 
Netloab toolkit 1112
Netloab toolkit 1112Netloab toolkit 1112
Netloab toolkit 1112馬 萬圳
 
Rdl esp32 development board trainer kit
Rdl esp32 development board trainer kitRdl esp32 development board trainer kit
Rdl esp32 development board trainer kitResearch Design Lab
 
Exploring Hardware Security
Exploring Hardware SecurityExploring Hardware Security
Exploring Hardware SecuritySpeck&Tech
 
Intel Edison: Beyond the Breadboard
Intel Edison: Beyond the BreadboardIntel Edison: Beyond the Breadboard
Intel Edison: Beyond the Breadboardyeokm1
 
Getting started with Intel IoT Developer Kit
Getting started with Intel IoT Developer KitGetting started with Intel IoT Developer Kit
Getting started with Intel IoT Developer KitSulamita Garcia
 
Republic of IoT - Hackathon Hardware Kits Hands-on Labs
Republic of IoT - Hackathon Hardware Kits Hands-on LabsRepublic of IoT - Hackathon Hardware Kits Hands-on Labs
Republic of IoT - Hackathon Hardware Kits Hands-on LabsAlwin Arrasyid
 
Intro to the Arduino Entrepreneurial System
Intro to the Arduino Entrepreneurial SystemIntro to the Arduino Entrepreneurial System
Intro to the Arduino Entrepreneurial Systemtodbotdotcom
 
Using arduino and raspberry pi for internet of things
Using arduino and raspberry pi for internet of thingsUsing arduino and raspberry pi for internet of things
Using arduino and raspberry pi for internet of thingsSudar Muthu
 
Adafruit Huzzah Esp8266 WiFi Board
Adafruit Huzzah Esp8266 WiFi BoardAdafruit Huzzah Esp8266 WiFi Board
Adafruit Huzzah Esp8266 WiFi BoardBiagio Botticelli
 
How to Install ESP8266 WiFi Web Server using Arduino IDE
How to Install ESP8266 WiFi Web Server using Arduino IDEHow to Install ESP8266 WiFi Web Server using Arduino IDE
How to Install ESP8266 WiFi Web Server using Arduino IDENaoto MATSUMOTO
 
Raspberry Pi - best friend for all your GPIO needs
Raspberry Pi - best friend for all your GPIO needsRaspberry Pi - best friend for all your GPIO needs
Raspberry Pi - best friend for all your GPIO needsDobrica Pavlinušić
 
IoT Getting Started with Intel® IoT Devkit
IoT Getting Started with Intel® IoT DevkitIoT Getting Started with Intel® IoT Devkit
IoT Getting Started with Intel® IoT DevkitVasily Ryzhonkov
 
Lab Handson: Power your Creations with Intel Edison!
Lab Handson: Power your Creations with Intel Edison!Lab Handson: Power your Creations with Intel Edison!
Lab Handson: Power your Creations with Intel Edison!Codemotion
 
Road to Republic of IoT - ESP32 Programming and LoRa
Road to Republic of IoT - ESP32 Programming and LoRaRoad to Republic of IoT - ESP32 Programming and LoRa
Road to Republic of IoT - ESP32 Programming and LoRaAndri Yadi
 

Tendances (20)

Esp32 cam arduino-123
Esp32 cam arduino-123Esp32 cam arduino-123
Esp32 cam arduino-123
 
Making and breaking security in embedded devices
Making and breaking security in embedded devicesMaking and breaking security in embedded devices
Making and breaking security in embedded devices
 
Arduino i rremote 1112
Arduino i rremote 1112Arduino i rremote 1112
Arduino i rremote 1112
 
Netloab toolkit 1112
Netloab toolkit 1112Netloab toolkit 1112
Netloab toolkit 1112
 
Rdl esp32 development board trainer kit
Rdl esp32 development board trainer kitRdl esp32 development board trainer kit
Rdl esp32 development board trainer kit
 
Exploring Hardware Security
Exploring Hardware SecurityExploring Hardware Security
Exploring Hardware Security
 
Esp8266 basics
Esp8266 basicsEsp8266 basics
Esp8266 basics
 
Intel Edison: Beyond the Breadboard
Intel Edison: Beyond the BreadboardIntel Edison: Beyond the Breadboard
Intel Edison: Beyond the Breadboard
 
Getting started with Intel IoT Developer Kit
Getting started with Intel IoT Developer KitGetting started with Intel IoT Developer Kit
Getting started with Intel IoT Developer Kit
 
Republic of IoT - Hackathon Hardware Kits Hands-on Labs
Republic of IoT - Hackathon Hardware Kits Hands-on LabsRepublic of IoT - Hackathon Hardware Kits Hands-on Labs
Republic of IoT - Hackathon Hardware Kits Hands-on Labs
 
Intro to the Arduino Entrepreneurial System
Intro to the Arduino Entrepreneurial SystemIntro to the Arduino Entrepreneurial System
Intro to the Arduino Entrepreneurial System
 
Using arduino and raspberry pi for internet of things
Using arduino and raspberry pi for internet of thingsUsing arduino and raspberry pi for internet of things
Using arduino and raspberry pi for internet of things
 
Adafruit Huzzah Esp8266 WiFi Board
Adafruit Huzzah Esp8266 WiFi BoardAdafruit Huzzah Esp8266 WiFi Board
Adafruit Huzzah Esp8266 WiFi Board
 
Arduino & NodeMcu
Arduino & NodeMcuArduino & NodeMcu
Arduino & NodeMcu
 
How to Install ESP8266 WiFi Web Server using Arduino IDE
How to Install ESP8266 WiFi Web Server using Arduino IDEHow to Install ESP8266 WiFi Web Server using Arduino IDE
How to Install ESP8266 WiFi Web Server using Arduino IDE
 
Raspberry Pi - best friend for all your GPIO needs
Raspberry Pi - best friend for all your GPIO needsRaspberry Pi - best friend for all your GPIO needs
Raspberry Pi - best friend for all your GPIO needs
 
IoT Getting Started with Intel® IoT Devkit
IoT Getting Started with Intel® IoT DevkitIoT Getting Started with Intel® IoT Devkit
IoT Getting Started with Intel® IoT Devkit
 
Lab Handson: Power your Creations with Intel Edison!
Lab Handson: Power your Creations with Intel Edison!Lab Handson: Power your Creations with Intel Edison!
Lab Handson: Power your Creations with Intel Edison!
 
Road to Republic of IoT - ESP32 Programming and LoRa
Road to Republic of IoT - ESP32 Programming and LoRaRoad to Republic of IoT - ESP32 Programming and LoRa
Road to Republic of IoT - ESP32 Programming and LoRa
 
P&O Session 2
P&O Session 2P&O Session 2
P&O Session 2
 

En vedette

Database 101
Database 101Database 101
Database 101thehoagie
 
Hardware Hacking caso práctico Ingeniería Inversa Smartcards
Hardware Hacking caso práctico Ingeniería Inversa SmartcardsHardware Hacking caso práctico Ingeniería Inversa Smartcards
Hardware Hacking caso práctico Ingeniería Inversa SmartcardsAndres Lozano
 
Hardware Hacking in schools (ACEC2014)
Hardware Hacking in schools (ACEC2014)Hardware Hacking in schools (ACEC2014)
Hardware Hacking in schools (ACEC2014)Dan Bowen
 
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdf
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdfamrapali builders @@ hardware hacking and robotics using the raspberry pi.pdf
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdfamrapalibuildersreviews
 
BSides DFW2016-Hack Mode Enabled
BSides DFW2016-Hack Mode EnabledBSides DFW2016-Hack Mode Enabled
BSides DFW2016-Hack Mode Enabledpricemcdonald
 
Cloud Computing 101
Cloud Computing 101Cloud Computing 101
Cloud Computing 101Chris Yeo
 
Coders need to learn hardware hacking NOW
Coders need to learn hardware hacking NOWCoders need to learn hardware hacking NOW
Coders need to learn hardware hacking NOWMatt Biddulph
 
JTAG Interface (Intro)
JTAG Interface (Intro)JTAG Interface (Intro)
JTAG Interface (Intro)Nitesh Bhatia
 
PyTriage: A malware analysis framework
PyTriage: A malware analysis frameworkPyTriage: A malware analysis framework
PyTriage: A malware analysis frameworkYashin Mehaboobe
 
CNIT 126 4: A Crash Course in x86 Disassembly
CNIT 126 4: A Crash Course in x86 DisassemblyCNIT 126 4: A Crash Course in x86 Disassembly
CNIT 126 4: A Crash Course in x86 DisassemblySam Bowne
 
FSEC 2014 - I can haz your board with JTAG
FSEC 2014 - I can haz your board with JTAGFSEC 2014 - I can haz your board with JTAG
FSEC 2014 - I can haz your board with JTAGDobrica Pavlinušić
 
Cheap, good, hackable tools from China: AVR component tester
Cheap, good, hackable tools from China: AVR component testerCheap, good, hackable tools from China: AVR component tester
Cheap, good, hackable tools from China: AVR component testerDobrica Pavlinušić
 

En vedette (18)

Router forensics
Router forensicsRouter forensics
Router forensics
 
Hardware 101
Hardware 101Hardware 101
Hardware 101
 
Database 101
Database 101Database 101
Database 101
 
Hardware Hacking caso práctico Ingeniería Inversa Smartcards
Hardware Hacking caso práctico Ingeniería Inversa SmartcardsHardware Hacking caso práctico Ingeniería Inversa Smartcards
Hardware Hacking caso práctico Ingeniería Inversa Smartcards
 
Hardware Hacking in schools (ACEC2014)
Hardware Hacking in schools (ACEC2014)Hardware Hacking in schools (ACEC2014)
Hardware Hacking in schools (ACEC2014)
 
Playful
PlayfulPlayful
Playful
 
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdf
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdfamrapali builders @@ hardware hacking and robotics using the raspberry pi.pdf
amrapali builders @@ hardware hacking and robotics using the raspberry pi.pdf
 
Hardware Hacking Primer
Hardware Hacking PrimerHardware Hacking Primer
Hardware Hacking Primer
 
Hardware hacking
Hardware hackingHardware hacking
Hardware hacking
 
BSides DFW2016-Hack Mode Enabled
BSides DFW2016-Hack Mode EnabledBSides DFW2016-Hack Mode Enabled
BSides DFW2016-Hack Mode Enabled
 
Cloud Computing 101
Cloud Computing 101Cloud Computing 101
Cloud Computing 101
 
Breaking Bad EACS Implementations
Breaking Bad EACS ImplementationsBreaking Bad EACS Implementations
Breaking Bad EACS Implementations
 
Coders need to learn hardware hacking NOW
Coders need to learn hardware hacking NOWCoders need to learn hardware hacking NOW
Coders need to learn hardware hacking NOW
 
JTAG Interface (Intro)
JTAG Interface (Intro)JTAG Interface (Intro)
JTAG Interface (Intro)
 
PyTriage: A malware analysis framework
PyTriage: A malware analysis frameworkPyTriage: A malware analysis framework
PyTriage: A malware analysis framework
 
CNIT 126 4: A Crash Course in x86 Disassembly
CNIT 126 4: A Crash Course in x86 DisassemblyCNIT 126 4: A Crash Course in x86 Disassembly
CNIT 126 4: A Crash Course in x86 Disassembly
 
FSEC 2014 - I can haz your board with JTAG
FSEC 2014 - I can haz your board with JTAGFSEC 2014 - I can haz your board with JTAG
FSEC 2014 - I can haz your board with JTAG
 
Cheap, good, hackable tools from China: AVR component tester
Cheap, good, hackable tools from China: AVR component testerCheap, good, hackable tools from China: AVR component tester
Cheap, good, hackable tools from China: AVR component tester
 

Similaire à Hacker's and painters Hardware Hacking 101 - 10th Oct 2014

20141107 nus friday hacks presentation get started with electronics
20141107 nus friday hacks presentation get started with electronics20141107 nus friday hacks presentation get started with electronics
20141107 nus friday hacks presentation get started with electronicsTakeda Pharmaceuticals
 
FPGA_prototyping proccesing with conclusion
FPGA_prototyping proccesing with conclusionFPGA_prototyping proccesing with conclusion
FPGA_prototyping proccesing with conclusionPersiPersi1
 
Bsides Puerto Rico-2017
Bsides Puerto Rico-2017Bsides Puerto Rico-2017
Bsides Puerto Rico-2017Price McDonald
 
2015 02 28 DotNetSpain IoT Fight
2015 02 28 DotNetSpain IoT Fight2015 02 28 DotNetSpain IoT Fight
2015 02 28 DotNetSpain IoT FightBruno Capuano
 
Appsterdam talk - about the chips inside your phone
Appsterdam talk - about the chips inside your phoneAppsterdam talk - about the chips inside your phone
Appsterdam talk - about the chips inside your phonemarcocjacobs
 
Feasibility of Security in Micro-Controllers
Feasibility of Security in Micro-ControllersFeasibility of Security in Micro-Controllers
Feasibility of Security in Micro-Controllersardiri
 
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...Mark Goldstein
 
Datasheet PIC16f887
Datasheet PIC16f887Datasheet PIC16f887
Datasheet PIC16f887whendygarcia
 
Emb Sys Rev Ver1
Emb Sys   Rev Ver1Emb Sys   Rev Ver1
Emb Sys Rev Ver1ncct
 
Tools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade FinalTools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade FinalPriyanka Aash
 
Android Things Linux Day 2017
Android Things Linux Day 2017 Android Things Linux Day 2017
Android Things Linux Day 2017 Stefano Sanna
 
introduction of arduino and node mcu
introduction of arduino and node mcuintroduction of arduino and node mcu
introduction of arduino and node mcu6305HASANBASARI
 
Resume_DigitalIC_1
Resume_DigitalIC_1Resume_DigitalIC_1
Resume_DigitalIC_1Eunice Chen
 
Brochure (2016-01-30)
Brochure (2016-01-30)Brochure (2016-01-30)
Brochure (2016-01-30)Jonah McLeod
 
2015 01 24 Coding4Fun at Tajamar
2015 01 24 Coding4Fun at Tajamar2015 01 24 Coding4Fun at Tajamar
2015 01 24 Coding4Fun at TajamarBruno Capuano
 
POLYTEDA PowerDRC/LVS overview
POLYTEDA PowerDRC/LVS overviewPOLYTEDA PowerDRC/LVS overview
POLYTEDA PowerDRC/LVS overviewAlexander Grudanov
 
MicroEJ OS and Edje: the software foundation for IoT devices
MicroEJ OS and Edje: the software foundation for IoT devicesMicroEJ OS and Edje: the software foundation for IoT devices
MicroEJ OS and Edje: the software foundation for IoT devicesMicroEJ
 
Microcontroller from basic_to_advanced
Microcontroller from basic_to_advancedMicrocontroller from basic_to_advanced
Microcontroller from basic_to_advancedImran Sheikh
 

Similaire à Hacker's and painters Hardware Hacking 101 - 10th Oct 2014 (20)

20141107 nus friday hacks presentation get started with electronics
20141107 nus friday hacks presentation get started with electronics20141107 nus friday hacks presentation get started with electronics
20141107 nus friday hacks presentation get started with electronics
 
FPGA_prototyping proccesing with conclusion
FPGA_prototyping proccesing with conclusionFPGA_prototyping proccesing with conclusion
FPGA_prototyping proccesing with conclusion
 
Bsides Puerto Rico-2017
Bsides Puerto Rico-2017Bsides Puerto Rico-2017
Bsides Puerto Rico-2017
 
2015 02 28 DotNetSpain IoT Fight
2015 02 28 DotNetSpain IoT Fight2015 02 28 DotNetSpain IoT Fight
2015 02 28 DotNetSpain IoT Fight
 
Appsterdam talk - about the chips inside your phone
Appsterdam talk - about the chips inside your phoneAppsterdam talk - about the chips inside your phone
Appsterdam talk - about the chips inside your phone
 
Feasibility of Security in Micro-Controllers
Feasibility of Security in Micro-ControllersFeasibility of Security in Micro-Controllers
Feasibility of Security in Micro-Controllers
 
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...
IEEE Computer Society Phoenix - Today’s Gadgets & Emerging Technology Innovat...
 
Datasheet PIC16f887
Datasheet PIC16f887Datasheet PIC16f887
Datasheet PIC16f887
 
Emb Sys Rev Ver1
Emb Sys   Rev Ver1Emb Sys   Rev Ver1
Emb Sys Rev Ver1
 
Tools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade FinalTools Of The Hardware Hacking Trade Final
Tools Of The Hardware Hacking Trade Final
 
Android Things Linux Day 2017
Android Things Linux Day 2017 Android Things Linux Day 2017
Android Things Linux Day 2017
 
Resume_A0
Resume_A0Resume_A0
Resume_A0
 
introduction of arduino and node mcu
introduction of arduino and node mcuintroduction of arduino and node mcu
introduction of arduino and node mcu
 
Vlsi
VlsiVlsi
Vlsi
 
Resume_DigitalIC_1
Resume_DigitalIC_1Resume_DigitalIC_1
Resume_DigitalIC_1
 
Brochure (2016-01-30)
Brochure (2016-01-30)Brochure (2016-01-30)
Brochure (2016-01-30)
 
2015 01 24 Coding4Fun at Tajamar
2015 01 24 Coding4Fun at Tajamar2015 01 24 Coding4Fun at Tajamar
2015 01 24 Coding4Fun at Tajamar
 
POLYTEDA PowerDRC/LVS overview
POLYTEDA PowerDRC/LVS overviewPOLYTEDA PowerDRC/LVS overview
POLYTEDA PowerDRC/LVS overview
 
MicroEJ OS and Edje: the software foundation for IoT devices
MicroEJ OS and Edje: the software foundation for IoT devicesMicroEJ OS and Edje: the software foundation for IoT devices
MicroEJ OS and Edje: the software foundation for IoT devices
 
Microcontroller from basic_to_advanced
Microcontroller from basic_to_advancedMicrocontroller from basic_to_advanced
Microcontroller from basic_to_advanced
 

Dernier

System Simulation and Modelling with types and Event Scheduling
System Simulation and Modelling with types and Event SchedulingSystem Simulation and Modelling with types and Event Scheduling
System Simulation and Modelling with types and Event SchedulingBootNeck1
 
US Department of Education FAFSA Week of Action
US Department of Education FAFSA Week of ActionUS Department of Education FAFSA Week of Action
US Department of Education FAFSA Week of ActionMebane Rash
 
Main Memory Management in Operating System
Main Memory Management in Operating SystemMain Memory Management in Operating System
Main Memory Management in Operating SystemRashmi Bhat
 
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdf
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdfCCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdf
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdfAsst.prof M.Gokilavani
 
Energy Awareness training ppt for manufacturing process.pptx
Energy Awareness training ppt for manufacturing process.pptxEnergy Awareness training ppt for manufacturing process.pptx
Energy Awareness training ppt for manufacturing process.pptxsiddharthjain2303
 
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort service
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort serviceGurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort service
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort servicejennyeacort
 
home automation using Arduino by Aditya Prasad
home automation using Arduino by Aditya Prasadhome automation using Arduino by Aditya Prasad
home automation using Arduino by Aditya Prasadaditya806802
 
Solving The Right Triangles PowerPoint 2.ppt
Solving The Right Triangles PowerPoint 2.pptSolving The Right Triangles PowerPoint 2.ppt
Solving The Right Triangles PowerPoint 2.pptJasonTagapanGulla
 
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTION
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTIONTHE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTION
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTIONjhunlian
 
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...Amil Baba Dawood bangali
 
Steel Structures - Building technology.pptx
Steel Structures - Building technology.pptxSteel Structures - Building technology.pptx
Steel Structures - Building technology.pptxNikhil Raut
 
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfg
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfgUnit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfg
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfgsaravananr517913
 
Introduction-To-Agricultural-Surveillance-Rover.pptx
Introduction-To-Agricultural-Surveillance-Rover.pptxIntroduction-To-Agricultural-Surveillance-Rover.pptx
Introduction-To-Agricultural-Surveillance-Rover.pptxk795866
 
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catchers
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor CatchersTechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catchers
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catcherssdickerson1
 
Transport layer issues and challenges - Guide
Transport layer issues and challenges - GuideTransport layer issues and challenges - Guide
Transport layer issues and challenges - GuideGOPINATHS437943
 
Indian Dairy Industry Present Status and.ppt
Indian Dairy Industry Present Status and.pptIndian Dairy Industry Present Status and.ppt
Indian Dairy Industry Present Status and.pptMadan Karki
 
welding defects observed during the welding
welding defects observed during the weldingwelding defects observed during the welding
welding defects observed during the weldingMuhammadUzairLiaqat
 
Mine Environment II Lab_MI10448MI__________.pptx
Mine Environment II Lab_MI10448MI__________.pptxMine Environment II Lab_MI10448MI__________.pptx
Mine Environment II Lab_MI10448MI__________.pptxRomil Mishra
 

Dernier (20)

🔝9953056974🔝!!-YOUNG call girls in Rajendra Nagar Escort rvice Shot 2000 nigh...
🔝9953056974🔝!!-YOUNG call girls in Rajendra Nagar Escort rvice Shot 2000 nigh...🔝9953056974🔝!!-YOUNG call girls in Rajendra Nagar Escort rvice Shot 2000 nigh...
🔝9953056974🔝!!-YOUNG call girls in Rajendra Nagar Escort rvice Shot 2000 nigh...
 
System Simulation and Modelling with types and Event Scheduling
System Simulation and Modelling with types and Event SchedulingSystem Simulation and Modelling with types and Event Scheduling
System Simulation and Modelling with types and Event Scheduling
 
US Department of Education FAFSA Week of Action
US Department of Education FAFSA Week of ActionUS Department of Education FAFSA Week of Action
US Department of Education FAFSA Week of Action
 
Main Memory Management in Operating System
Main Memory Management in Operating SystemMain Memory Management in Operating System
Main Memory Management in Operating System
 
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdf
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdfCCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdf
CCS355 Neural Networks & Deep Learning Unit 1 PDF notes with Question bank .pdf
 
Energy Awareness training ppt for manufacturing process.pptx
Energy Awareness training ppt for manufacturing process.pptxEnergy Awareness training ppt for manufacturing process.pptx
Energy Awareness training ppt for manufacturing process.pptx
 
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort service
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort serviceGurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort service
Gurgaon ✡️9711147426✨Call In girls Gurgaon Sector 51 escort service
 
home automation using Arduino by Aditya Prasad
home automation using Arduino by Aditya Prasadhome automation using Arduino by Aditya Prasad
home automation using Arduino by Aditya Prasad
 
Solving The Right Triangles PowerPoint 2.ppt
Solving The Right Triangles PowerPoint 2.pptSolving The Right Triangles PowerPoint 2.ppt
Solving The Right Triangles PowerPoint 2.ppt
 
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTION
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTIONTHE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTION
THE SENDAI FRAMEWORK FOR DISASTER RISK REDUCTION
 
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...
NO1 Certified Black Magic Specialist Expert Amil baba in Uae Dubai Abu Dhabi ...
 
Steel Structures - Building technology.pptx
Steel Structures - Building technology.pptxSteel Structures - Building technology.pptx
Steel Structures - Building technology.pptx
 
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfg
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfgUnit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfg
Unit7-DC_Motors nkkjnsdkfnfcdfknfdgfggfg
 
Introduction-To-Agricultural-Surveillance-Rover.pptx
Introduction-To-Agricultural-Surveillance-Rover.pptxIntroduction-To-Agricultural-Surveillance-Rover.pptx
Introduction-To-Agricultural-Surveillance-Rover.pptx
 
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catchers
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor CatchersTechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catchers
TechTAC® CFD Report Summary: A Comparison of Two Types of Tubing Anchor Catchers
 
Transport layer issues and challenges - Guide
Transport layer issues and challenges - GuideTransport layer issues and challenges - Guide
Transport layer issues and challenges - Guide
 
Indian Dairy Industry Present Status and.ppt
Indian Dairy Industry Present Status and.pptIndian Dairy Industry Present Status and.ppt
Indian Dairy Industry Present Status and.ppt
 
POWER SYSTEMS-1 Complete notes examples
POWER SYSTEMS-1 Complete notes  examplesPOWER SYSTEMS-1 Complete notes  examples
POWER SYSTEMS-1 Complete notes examples
 
welding defects observed during the welding
welding defects observed during the weldingwelding defects observed during the welding
welding defects observed during the welding
 
Mine Environment II Lab_MI10448MI__________.pptx
Mine Environment II Lab_MI10448MI__________.pptxMine Environment II Lab_MI10448MI__________.pptx
Mine Environment II Lab_MI10448MI__________.pptx
 

Hacker's and painters Hardware Hacking 101 - 10th Oct 2014

  • 1. HARDWARE Mark Wong 10th October 2014 hacking101 www.omgbazinga.com
  • 2. DISCLAIMER While the following has been conscientiously researched. Neither the organizers nor the author will accept any liability if you render your device inoperable as a result of these instructions. Proceed at your own risk. DO attempt these experiments, tests, trials, or any activity in this presentation at home, work, or anywhere else for that matter. Have fun, gain more experience and knowledge, be safe and use common sense!
  • 7.
  • 8.
  • 9.
  • 10.
  • 11. So the learning journey begins…
  • 12. 1997 Evolution of my Rigs SMOOTHER GAMES 1999 2002 2004 2006 2008 2009 2012 Coming soon 2015 Pursuit of No $?
  • 13. How does hardware affect me? HARDWARE ROCKS
  • 14.
  • 15. iB Secure Device token UNLOCKS YOUR MONEH
  • 16. Coin Cell Battery Epoxied resin IC die “Chip-on-board”, ‘glob-top’ Button contacts Infineon BC857BL3 PNP transistor Assorted SMD resistors Test / programming pads Manufacturer information silkscreen 32.768kHz Ceramic Crystal Oscillator LCD junction pads
  • 17. Technical Specifications • Weight: 14 grams • Dimensions: 9.8 x 25.9 x 62.7mm • Display: 8-characters LCD • Keypad: one-button • Real-time clock to provide time value to DIGIPASS algorithm • Supported crypto algorithm: DES, 3DES and AES, DIGIPASS time and event based • OATH event (HOTP) or time (TOTP) • Battery: non-replaceable, lifetime expectancy 7 years https://www.vasco.com/products/client_products/single_button_digipass/digipass_go6.aspx
  • 18. What have we learnt? OATH - Initiative for Open AuTHentication HOTP: An HMAC-Based One-Time Password Algorithm (RFC 4226) Supports: TOTP -Time-Based One- Time Password Algorithm (RFC 6238) Standards set by: Internet Engineering Task Force (IETF) Then HOTP(K,C) is mathematically defined by: HOTP(K,C) = Truncate(HMAC(K,C)) & 0x7FFFFFFF K is a secret key, C is a counter key For HOTP to be useful for an individual as a system input, result must be converted into a HOTP value, (6–8 digits number) where HOTP-Value = HOTP(K,C) mod 10d, d is the desired number of digits http://en.wikipedia.org/wiki/HMAC-based_One-time_Password_Algorithm http://www.sourcemediaconferences.com/CTST09/PDF09/D/Tuesday/BajajSiddharth.pdf http://www.globaleventspanama.com/clab2010/files/conf_donald_malloy.pdf
  • 19. Somebody already hacked it! https://http://blog.valverde.me/2014/01/03/reverse-engineering-my-bank%27s-security-token/#.VCIywxbgzgU
  • 21. What can I do with what I’ve learnt? The “stuff” Who makes it? How did they do it? Learn everything about it, try it. Learn about cryptography Learn about low-cost manufacturing or electronic packages Make your own crypto-key generator Be happy having learnt something  http://www.empf.org/empfasis/dec04/improve1204.htm http://www.digikey.com/catalog/en/partgroup/avr-cryptocontroller/32031 http://www.maximintegrated.com/en/products/digital/microcontrollers/MAXQ1010.html
  • 22.
  • 23. How do I Start?
  • 24. Tools of the trade Screwdriver. Multi-meter. Pliers. Cutters.
  • 25. What the heck hack is inside IT?
  • 26. HOW DOES A CAR WORK? HOW DOES YOUR EZ-LINK WORK?
  • 27. If you don't know how things work, how can you design interfaces with dreams to change the world? How do you improve something if you don't know how it works?
  • 28. Build. Fail. Rebuild. Results. Outcome. Find out How? Why? System design / Adoption Hardware Lifecycle Summary 3-stage Block diagram
  • 29.
  • 31.
  • 32. BOM (Bill of Materials), Datasheets
  • 33.
  • 35.
  • 36. • ultra-small (2mm x 2mm) – WOW! • Tri-axial • Measurement of accelerations in 3 perpendicular axes • Senses tilt, motion, shock and vibration - Low power consumption of 130 μA – NICE!
  • 37. Don’t be afraid to blow things up
  • 38. Online Resources Complexity & Ability Time
  • 39. 3-stage Block diagram Controller / Process / Decision Measurement / Input Outcome
  • 40. Input •Keyboard • Sensor • Touch screen Process • Processor •Microcontroller • Signal conditioning •Analog-to-digital Converter •Application software / firmware Output • LEDs • Screen •Sound Design your system
  • 41.
  • 42.
  • 45. Apollo Guidance Computer (AGC), 1966 16-bit, 55Watts <1MIPS, 4K RAM, 32K ROM, 8 GPIO 1.024 Mhz 31 kilograms $15 Million Arduino UNO platform, 2009 8-bit Atmel atmega ATmega328 20MIPS, 2K RAM, 32K ROM, 14 GPIO 16Mhz 27 grams $20
  • 46. Hardware platforms change all the time. The key is quick adoption.
  • 47. Diodes Boring. Not Fun. http://startingelectronics.com/beginners/components/LED/ http://dangerousprototypes.com/docs/Basic_Light_Emitting_Diode_guide
  • 48. What does it • ONE WAY VALVE • PLUS (+) and MINUS (-) • Makes pretty lights do?
  • 49.
  • 50.
  • 51.
  • 52. What are you gonna make?
  • 54. Learning Curve Complexity & Ability I kick-ass   Valley of despair – “who’s dumb idea is this” Can’t live without! Time Increase in skills Associative stage Autonomous stage GOD-LIKE Trial & Error Cognitive stage ‘I suck’ threshold
  • 55.

Notes de l'éditeur

  1. Riva TNT 128 S3 Virge (1995) S3 Savage Voodoo 3D Geforce 256 Geforce 2 (2000) Geforce 3 Ti ATI Radeon 4-series Geforce 6600GT, 6800 Geforce 8800GTX (2008) Geforce 9800GT (2009) Geforce GTX 280 (2010) Geforce GTX 560 (2011) Geforce GTX 980 (2014)
  2. Q: What is hardware hacking and why should I care about it? A: Your secure software is only as secure as the hardware it is running on. Imagine implementing all your crypto correctly, but a tiny little port or backdoor, or a post-it shows the password.
  3. chip-on-board. The die is glued to the PCB and wires are bonded from it to pads
  4. chip-on-board. The die is glued to the PCB and wires are bonded from it to pads
  5. chip-on-board. The die is glued to the PCB and wires are bonded from it to pads
  6. Q: What is hardware hacking and why should I care about it? A: Your secure software is only as secure as the hardware it is running on. Imagine implementing all your crypto correctly, but a tiny little port or backdoor, or a post-it shows the password.
  7. How many here have a driving license? So when I was young, I found out that I could control the tv. Nobody could give me a satisfactory answer on how a radio works Everything you need to know. Is available here. We now live in an era of instant information, this one example of how quickly technology is moving and how we must adapt to keep ourselves relevant in this industry.
  8. Manufacturers rely on the information that is included in the bill of materials (BOM) to build a product. The bill of materials typically includes part names, part numbers, part revisions and the quantities required to build an assembly. Thorough BOMs can include more descriptive information too, for example, the unit of measure or procurement type. BOMs that have printed circuit board assemblies (PCBAs) contain a column for listing reference designators.
  9. Step 1.
  10. Turn screws. Void warranties. Open minds.
  11. Every so often a piece of technology can become a lever that moves the world, just a little bit. The Arduino is one of those levers. It started off as a project to give artists access to embedded microprocessors for interaction design projects, but I think it’s going to end up in a museum, someday, as a building block of the future world. Arduino allows rapid, cheap, prototyping for embedded systems. It turns what used to be fairly tough hardware problems into much simpler software problems. And it’s become the poster child of the Maker Movement. The real power is the community.
  12. Fail fast, learn quickly, succeed sooner By turning abstract concepts into visual forms for validation
  13. By the high levels, it would be getting an equivalent of a mechanical / electrical and electronics diploma