Компания Microsoft поглотила компанию ReFirm Labs, развивающую открытый инструментарий Binwalk, предназначенный для анализа, обратного инжиниринга и извлечения образов прошивок. В качестве причины покупки упоминается желание повышения безопасности устройств интернета вещей (IoT). Код Binwalk написан на языке Python и распространяется под лицензией MIT.

NSO Group claims that its Pegasus spyware is only used to “investigate terrorism and crime” and “leaves no traces whatsoever”. This Forensic Methodology Report shows that neither of these statements are true. This report accompanies the release of the Pegasus Project, a collaborative investigation that involves more than 80 journalists from 17 media organizations in 10 countries coordinated by Forbidden Stories with technical support of Amnesty International’s Security Lab. Amnesty International’s Security Lab has performed in-depth forensic analysis of numerous mobile devices from human rights defenders (HRDs) and journalists around the world. This research has uncovered widespread, persistent and ongoing unlawful surveillance and human rights abuses perpetrated using NSO Group’s Pegasus spyware.

On Saturday, I managed to dump the firmware of the newly released Apple AirTags - and in this video I'll show how I did it.

I won't share firmware dumps or so, so please don't ask :)

Links:
- Colin on Twitter: http://twitter.com/colinoflynn
- Colin on YouTube: https://www.youtube.com/channel/UCqc9MJwX_R1pQC6A353JmJg
- Colin's company: https://www.newae.com
- LimitedResults Appprotect bypass: https://limitedresults.com/2020/06/nrf52-debug-resurrection-approtect-bypass/
- LimitedResults Pocketglitcher: https://limitedresults.com/2021/03/the-pocketglitcher/

My links:
- Twitter: https://twitter.com/ghidraninja
- Patreon: https://patreon.com/stacksmashing
- Pico Debug'n'Dump board: https://gum.co/picodnd

Timestamps:

00:00 Intro
00:10 AirTags hardware
01:40 Debugging interface
02:35 Fault-Injection
04:30 Glitching the AirTags
05:50 Hardware Setup
07:10 Lets Glitch
07:56 Firmware modification

Customize a RISC-V core to your exact specifications and download a custom development kit including RTL and FPGA deliverables with SiFive Core Designer.

A security researcher warns that a feature that displays when an AirTag was last seen could give away some sensitive information about its surroundings.