311: Attack Other People's Refrigerators

Rick Altherr (@kc8apf) spoke with us about firmware security and mentoring.

Rick is a security researcher at Eclypsium. His personal website is kc8apf.net.

Rick’s deeply technical dive into reverse engineering car ECUs and FPGA bitstreams was on the Unnamed Reverse Engineering Podcast, episode 24. He also spoke with Chris Gammell The Amp Hour 357 about monitoring servers, many many servers.

Firmware security links:

• STRIDE threat model

• OWASP Top 10 Security Risks

• OWASP IoT Firmware Analysis

• OWASP Embedded Application Security Best Practices

• Common Vulnerabilities and Exposures

• Elecia’s Device Security Checklist (wasn’t mentioned)

Thank you to our Embedded Patreon supporters, particularly to our corporate patron, InterWorking Labs (iwl.com).