Adventures in Reverse Engineering Broadcom NIC Firmware (37c3)
Unlocking a system with 100% open source firmware
Summary
In an era where vendors increasingly seek to use proprietary software in the devices around us to exert control over their users, the desire for open source software has expanded to the firmware that allows our machines to function, and platforms which individuals can trust and control have never been more important. However, changes to hardware platforms in recent years such as the Intel ME, vendor-supplied binary blobs and vendor-signed firmware images have repeatedly set back efforts to create open source firmware for the computers we use. The release of Power servers with 99% open source firmware excited many who had been searching for a computer they could trust, but one proprietary firmware blob remained: that of the Ethernet controller. This is the story of how that blob was reverse engineered and replaced with an open source replacement, delivering the first machine with desktop-class performance and 100% open source firmware in many years. This talk is about how I reverse engineered the final remaining firmware blob on the Talos II/Blackbird POWER9 systems, enabling it to be replaced with an open source replacement, in an intensive reverse engineering effort that spanned several years. The talk will begin by introducing the open source firmware movement and its practical and ethical motivations, and note the obstacles to delivering fully open source firmware for contemporary x86 and other platforms and explaining the motive behind the project, before moving onto a more technical discussion of the adventure of firmware reverse engineering and the obstacles encountered. Subjects I intend to cover include: how the original proprietary firmware was reverse engineered from scratch with only limited knowledge of device internals; the long history of Broadcom NIC architecture and its evolution over time; the tools that had to be developed to enable the device probing, testing and reversing process; the story of a horrifying but necessary detour into reversing x86 real mode code and the novel methodology used to aid reversing; how modern NICs allow BMCs in servers to share network ports with the host, and the security hazards this creates; and how fully open source firmware was created legally using a clean room process. This talk will be accessible to audiences unfamiliar with POWER9 or the open source firmware community, but is also intended to cover some new ground and be of interest to those familiar with the project. The talk will mainly be of interest to those interested in open source firmware and issues such as owner control and the security and auditability issues caused by proprietary firmware, and to those interested in reverse engineering. about this event: https://events.ccc.de/congress/2023/hub/event/adventures_in_reverse_engineering_broadcom_nic_firmware/
First published
12/27/2023
Genres
Duration
60 minutes
Parent Podcast
Chaos Computer Club - recent events feed (high quality)
View PodcastSimilar Episodes
-
Sichere Rechner mit Matthias Lindhorst vom Chaos Computer Club Essen
05/13/2019
Was weiß Facebook über mich? Wer hat meine Daten? Was passiert mit meinen Daten? Wie lang ist ein sicheres Passwort? Wir sprechen mit dem IT-Profi. In Zeiten eines oft naiven Technikglaubens ist es wichtig ein Grundverständnis der Technik zu haben, die wir tagtäglich nutzen. Wir alle hinterlassen unsere Spuren im Internet. Meist in Form von Daten. Diese Daten beziehen sich auf uns, folgen uns und holen uns ein. Sie sind oftmals belanglos, manchmal aber auch wichtig, oder äußerst lästig. Sie erinnern sich an uns, auch wenn wir sie vergessen. Wir reden mit Matthias Lindhorst vom Chaos Computer Club Essen (C3E). Er ist Fachinformatiker für Anwendungsentwicklung und seit vielen Jahren aktiv im Chaos Computer Club. Hier ist er an der Initiative Chaos macht Schule beteiligt, die es sich zur Aufgabe macht, Schülern und Eltern Grundkompetenz in Sachen Neue Medien und digitaler Privatsphäre zu vermitteln.
Clean -
Episode 176: Crackstreams - Live match streams online in best video quality
01/09/2023
You may watch the most recent athletic events on any device on Crackstreams. High quality streaming is available for popular sporting events like the NBA, NFL, NHL, MLS Soccer, Copa America, Tennis, Boxing, MLB, and MMA/UFC. On Crackstreams, you may watch free athletic events online without having to pay anything. The NBA, NFL, NHL, Major League Soccer, and the Copa America are just a few of the well-known events that are covered. https://wbontv.com/author/crackstreams/ https://www.healthsafety.com/user/211680 https://forum.m5stack.com/user/crackstreams https://glamorouslengths.com/author/crackstreams/ https://hrjobs.lattice.com/employers/1669989-crackstreams https://graphql-ra-dev.roboticsacademy.fiu.edu/u/Crackstreams https://git.disroot.org/crackstreams https://www.eagleswing.org/washington/arts-entertainment/crackstreams
Clean -
174 High Quality Problems
06/24/2016
174 High Quality Problems by Jaemin Frazer
Clean -
BDP 101 – Daemons of Chaos, Mersey Meltdown and Teams Events
03/12/2013
Daemons of Chaos, Mersey Meltdown and Teams Events In episode 101 we have a guest on the show, Michael Biggs joins us to talk about the New Daemons of Chaos and some recent tournaments. Episode Sponsor – Kenny Lull says
Clean
Similar Podcasts
-
Club Disco Dynamite
08/12/2020
DJ Forplay Music
Club Disco Dynamite is a radio show brought to life at the dance club. It is a place to go and forget your troubles a place to come as you are and be how you want to be.The 1970’s were a tumultuous time and people went to the disco to forget and to be free. Experience the vibrancy and energy of the 70’s at Club Disco Dynamite. Dance the night away to fabulous disco dance music from the 70’s, and 80’s electro disco with music provided by DJ Forplay with occasional appearances by disco dance artists and local celebrities.
Clean -
High Profits Reviews and After Show - AfterBuzz TV
08/15/2020
AfterBuzz TV
The High Profits After Show recaps, reviews and discusses episodes of CNN's High Profits.Show Summary: Two entrepreneurs try to build the first marijuana franchise business.
Clean -
2017 U.S. Dirt Bike Events
08/18/2020
Mark Siddons
A site that lists every U.S. Dual Sport Rides, Enduro Rides, Hare Scrambles, Adventure Rides, Dirt Biking, Motocross. You can also find reviews on Dirt Bike products along with dirt bike gear, and products to make your dirt bike street legal.
Clean -
Potentially Dangerous
08/11/2020
IA Wrestle
Iowa’s premier site for youth, high school, college and international wrestling. Join hosts Ross Bartachek, Zach Lee, and Tony Hager on the Potentially Dangerous podcast each week breaking down the most recent news in the state of Iowa.
Clean -
Downtown Community Church DCC Podcast
08/12/2020
Downtown Community Church
Check out our weekly podcast featuring conversations from our most recent Sunday series.
Clean -
Vineyard Richmond Weekly Message
08/12/2020
Vineyard Community Church Richmond
Each week, you can listen along to the most recent message from Vineyard Richmond.
Clean -
STAR WARS The Vintage Rebellion Podcast
08/11/2020
The Star Wars Vintage Rebellion Podcast - SWTVR - Podcast Team
The Star Wars Vintage Rebellion Podcast is brought to you by five vintage Star Wars Toy collectors. The team discuss vintage star wars collectibles, recent threads and stories from across social media and forums, the current vintage market, oddball items, as well as covering stories that have been rocking the vintage collecting community. There are also interviews with all types of collector as well as an events section where you can discover Star Wars events in your area. All this plus much much more, so download this podcast now!
Clean -
SFDF Movie Podcast
08/15/2020
SFDF
SFDF Podcast discusses recent movie news, trailers, what we have been currently watching and what's coming soon.
Clean -
Christ Episcopal Church Sermons
08/12/2020
Christ Episcopal Church | Charlottesville, VA
PREACH THE GOSPEL, LOVE PEOPLE, TRUST GOD | Each week we share our most recent sermon
Clean -
Podcasts – New Covenant Church
08/12/2020
New Covenant Church
This is the official podcast feed for New Covenant Church in Longview Texas. For more info on NCC, please visit wearencc.com.
Clean -
Cinematic Idiots
08/17/2020
Cinematic Idiots
A bi-weekly podcast about film, pop culture, and books. Getting a little bit smarter, one classic film at a time.Brad and Monica host a classic movie club podcast that invites you to finally catch up on all those films you probably should have seen by now.
Clean -
What's Your Deal? with Phil Burke
08/15/2020
Phil Burke
Hey guys! Welcome to What's Your Deal? with Phil Burke. Where once a week (or whenever I'm not high), I interview and swap stories with comedians and other interesting people, to discuss issues and most importantly; figure out, what's their deal.
Clean
Discussion (0)
No comments yet
Be the first to share your thoughts about this episode!