[binary] Hacking Pixel Bootloaders and Injecting Bugs episode artwork

EPISODE · Nov 24, 2022 · 48 MIN

[binary] Hacking Pixel Bootloaders and Injecting Bugs

from Day[0] · host dayzerosec

A hardware heavy episode as we talk about two read protection bypasses, Pixel 6 bootloader exploitation and benchmarking fuzzers. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/170.html [00:00:00] Introduction [00:00:26] Spot the Vuln - Do More [00:05:04] Pixel6 Bootloader Exploitation [00:16:41] NXP i.MX SDP_READ_DISABLE Fuse Bypass [CVE-2022-45163] [00:22:05] Bypassing the Renesas RH850/P1M-E read protection using fault injection [00:29:32] FIXREVERTER: A Realistic Bug Injection Methodology for Benchmarking Fuzz Testing The DAY[0] Podcast episodes are streamed live on Twitch twice a week:  -- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities  -- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities  and exploits. We are also available on the usual podcast platforms:  -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063  -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt  -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz  -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9

Episode metadata supplied by the publisher feed · Published Nov 24, 2022

A hardware heavy episode as we talk about two read protection bypasses, Pixel 6 bootloader exploitation and benchmarking fuzzers. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/170.html [00:00:00] Introduction [00:00:26] Spot the Vuln - Do More [00:05:04] Pixel6 Bootloader Exploitation [00:16:41] NXP i.MX SDP_READ_DISABLE Fuse Bypass [CVE-2022-45163] [00:22:05] Bypassing the Renesas RH850/P1M-E read protection using fault injection [00:29:32] FIXREVERTER: A Realistic Bug Injection Methodology for Benchmarking Fuzz Testing The DAY[0] Podcast episodes are streamed live on Twitch twice a week:  -- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities  -- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities  and exploits. We are also available on the usual podcast platforms:  -- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063  -- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt  -- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz  -- Other audio platforms can be found at https://anchor.fm/dayzerosec You can also join our discord: https://discord.gg/daTxTK9

PodParley-generated summary based on available episode metadata and transcript content.

NOW PLAYING

[binary] Hacking Pixel Bootloaders and Injecting Bugs

0:00 48:19

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Frequently Asked Questions

How long is this episode of Day[0]?

This episode is 48 minutes long.

When was this Day[0] episode published?

This episode was published on November 24, 2022.

What is this episode about?

A hardware heavy episode as we talk about two read protection bypasses, Pixel 6 bootloader exploitation and benchmarking fuzzers. Links and vulnerability summaries for this episode are available at:...

Can I download this Day[0] episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!