Ludovic Tyack
@LudovicTyack
Followers
475
Following
314
Media
22
Statuses
141
HW & SW pentester during the day; HW & SW security researcher at night
France
Joined January 2021
Passionate about hacking & cybersecurity? Airbus is looking for a Vulnerability Research & Exploitation Specialist in France! š» Reverse engineering, Red Teaming āļøJoin a global aerospace & defense leader Apply now! š https://t.co/wheJECIvtJ
0
13
13
This is a (partial) image of the BCM2711 SoC (raspberry pi 4), taken backside. We can identify the 4xCortex A72 at the bottom right. Resolution is low (5um) to speed up the scanning - but using this setup, I still have coherent image at 50nm resolution.
0
0
8
This week I have taken out some stuff to build an affordable laser probing system. It is also capable of imaging (but very slow), and I will work on laser voltage probing. Laser fault injection should (will) also be possible.
8
9
87
Introducing the first open source SEM digital image capture solution, the Open Beam Interface! GitHub: https://t.co/POTXKRPos9 Bring your analog SEM into the digital world, all over one USB type-C connection. Taking orders now for our first batch of 6 boards, DM for details.
26
199
1K
Our team is looking for an offensive security engineer: https://t.co/aN2zsFbfzg Want to know more about our activities? Check out https://t.co/WCnGQ5GAfl. Interested in becoming an @AirbusSeclab team member? Feel free to reach out!
github.com
airbus-seclab has 41 repositories available. Follow their code on GitHub.
1
19
32
Robot can rip the data out of RAM chips with chilling technology
0
7
10
RT @hovav@infosec.exchange I guarantee that this is the wildest paper youāll read all year. Drewes et al., āPentimento: Data Remanence in Cloud FPGAs,ā https://t.co/gJNqtzOE9y We find that a remote attacker can recover⦠https://t.co/Z6UaFqAtQL
2
13
45
I really really need to try out this wizardry!!! https://t.co/4CcxeV2szy
hackster.io
Shining a bright enough infrared light at exposed silicon lets you peer down into its metal layers, without even removing it from its board.
0
1
10
Very interesting blog post by @eshard on side channel attacks targeting ARM SOCs https://t.co/z9orRTTipO
#infosec #cybersecurity #arm
1
59
165
MSP430F149 Rev S. Most others in this family have a mask ROM visible from the surface, but I can't seem to find it on this one without delayering.
3
15
103
The low cost fiber laser optic is now ready! Only based on COTS, around 2um spot when coupled to a 980nm laser, 100mm working distance, 75% of power transmission; less than 180ā¬. Can be mounted in most CNC routers / 3D printers.
3
15
81
It seams someone let this diode driver fall during the delivery⦠Fortunately, everything is still place inside - and my intention was to replace the pulse generator boardā¦
0
0
2
I just find out that simple paper tape can be used as low cost Infrared detector card (here a 980nm laser spot is converted to a visible green spot). It only works with a quite high power density - but itās still interesting to locate the focus point.
0
0
4
Yeah, let me just scrape the SOC to expose JTAG pads on the packageā¦
123
920
6K
Hey @HexRaysSA I think you forgot the best plugin for a RE dynamic approach in your repo: retsync ( https://t.co/fmEbUOVpYE) from the living legend agazet. Many features from recent plugins (such as TTD support) are implemented in retsync for ages :).
github.com
ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers. - bootleg/ret-sync
0
16
52
I need some good photographs of the MYK78 Clipper Chip, but the best ones available are my own photos from grad school, and those aren't quite good enough. So let's go step by step and see what's inside! 1/n
8
90
343
For those who think it require a lot of money to expose the die of a chip. This is a (dead) Mediatek SoC, decapsulated with an iron; and the passivation/top layers removed using a scalpel. We can then clearly locate the cores/peripherals/memory using a cheap microscope.
2
6
33
Measurements are performed with 1um displacement step (x axis). The decrease/noise before / after is due to the fact I am not in a dark environment. The edge is the laser spot disappearing, so the beam size is between 2 and 3um.
0
0
1