Joe Grand
@joegrand
Followers
28K
Following
845
Media
469
Statuses
3K
Hardware hacker, computer engineer, former L0pht member and juvenile delinquent, sometimes known as Kingpin.
Joined June 2008
Never thought I'd end up on Darknet Diaries! Thanks to everyone who has listened and, of course, @JackRhysider for having me. Check it out if you haven’t yet! Link here:
55
78
1K
The #DEFCON 27 Badge features a new mounting method: lanyard straps! Keeps the badge in place and frees up the clip for #badgelife.
19
130
495
Crafting a payload that exfiltrates data from a DD-WRT based router via rapidly blinking LED. Part of my optical covert channel experiments.
15
203
465
HACK THE PLANET! 📟.
17
16
420
WOW! This is so amazing and I'm grateful to be involved in this community! For the first time in forever, I skipped #hackersummercamp to have vacation with my other (actual) family and woke up to this surprise. Thank you thank you thank you! @defcon #defcon.
A beautiful salute to @joegrand at DEF CON 31. A lifetime achievement award well earned. #defcon @defcon
20
28
409
This was a super fun project and a reminder about the lasting effects of security problems long after they're patched.
24
116
392
Found this tracking device literally in the middle of the road. Housing was a bit beaten up, circuitry looks fine. SIM installed, UART at the bottom, USB test points on the left, 2x microphone, BT, WiFi, and GSM antennas. Yes, I've disconnected the battery (it was dead).
30
35
356
I’m not too active on social media, but here are my official accounts. Hopefully this will reduce the number of Joe Grand impersonators who are trying to scam people.
35
38
355
Oscilloscope view of the Renesas M16C timing attack in progress. As each byte in the password is successfully guessed, the total compare time increases just slightly.
10
66
336
TOP SECRET! This year's #DEFCON 27 Badge uses an @NXP KL27 ARM Cortex-M0+ (among other things). For most efficient hacking, use an LPC-Link2, @TagConnect TC2050-IDC-NL-050-ALL (normal orientation), and 1.8V-compatible level translator or USB-to-Serial adapter.
16
121
325
PCB reverse engineering experiment: Ambient v. IR light w/ modified webcam to see traces through soldermask.
9
95
268
An entire book on PCB reverse engineering! Includes work by @joegrand, @johndmcmaster, and Sergei Skorobogatov among others :)
1
108
255
Raspberry Pi Pico development using the Flipper Zero as a CMSIS-DAP interface for SWD and UART.
7
15
250
Successful timing attack and memory extraction from a Renesas M16C (M306K9FCLRP) thanks to q3k!
3
39
185
Use Scotch tape on an IC to more easily identify part markings. Just beware of ESD when removing! h/t @1ns0mn1h4ck
8
46
169
Rescued from the confines of a VHS tape, the L0pht Heavy Industries (@L0phtHeavyInd) video press kit is now available for convenient viewing!
6
49
139
Remember that Qualcomm Snapdragon mobile phone reference platform I scored for $3 at a surplus store in 2014? Finally got it working!
11
17
137
Finally cleaned up the Jupyter Notebook for glitching and extracting firmware from the @NordicTweets nRF52832 on a @itamarmedical1 WatchPAT One.
Glitching the nRF52832 on a WatchPAT One. Similar to AirTag setup: Target is powered directly from the ChipWhisperer, on-board voltage regulator output used as trigger, crowbar on DEC1. Based on seminal work by @LimitedResults, @colinoflynn, @ghidraninja, and @LennertWo.
4
28
139
Glitching the nRF52832 on a WatchPAT One. Similar to AirTag setup: Target is powered directly from the ChipWhisperer, on-board voltage regulator output used as trigger, crowbar on DEC1. Based on seminal work by @LimitedResults, @colinoflynn, @ghidraninja, and @LennertWo.
2
20
132
Capturing data leaked via modem LEDs using #OpticSpy. h/t @CnAdoctor + @AuburnU David Umphress for the inspiration.
4
25
117
#JTAGulator version 1.9 has arrived! Includes support to interface directly with OpenOCD. Now you can manipulate a target without needing a separate hardware adapter.
3
52
119
At the time, there were few legitimate career paths for hackers. We thought it would be amazing to do what we loved and actually get paid for it. It worked for a while, but the hard lessons of business and friendship still haunt me to this day.
2000: The hacker think tank and hacker collective L0pht Heavy Industries was acquired by security company ATstake.
8
22
116
I'm ready!
7
15
118
#JTAGulator version 1.8 has arrived! Includes combined JTAG scan (IDCODE + BYPASS), logic analyzer capability for use w/ sigrok (OLS/SUMP compatible).
3
45
104
Anyone want to hack some hardware? I'll be teaching in Singapore for the first time in 8 years!.
Interested in hardware hacking, but don't know where to start? This #BHASIA Training class teaches fundamental hardware hacking concepts and techniques used to reverse engineer and defeat the security of electronic devices. Learn more:
8
13
108
So honored for the opportunity to share this with my local Portland community. This talk is about recognizing our unique personal struggles and how we can (sometimes) use them to our advantage in order to move forward. Inspired by @KeelyGrand's new book!.
We're excited to announce Joe Grand's keynote for BSidesPDX 2023: Troublemakers and Superpowers. @joegrand (aka Kingpin) is a hardware hacker, teacher, daddy, & member of legendary hacker group L0pht. For more on Joe, check out
2
11
104
Just-for-fun teardown of a SafeNet ProtectServer Gold HSM/Crypto Co-Processor circa 2005. FIPS140-2 Level 3 compliant. Original MSRP > $10k USD. Learning from history never gets old.
5
43
102
Received a wearable version of the #JTAGulator from @ejosterberg today! Original version for scale. #badgelife
6
10
104
From hacker to actor😂. catch me in COLD WALLET - out tomorrow!.
Joe Grand (@joegrand) makes an appearance in this exclusive COLD WALLET clip! Catch it in select theaters and on Digital TOMORROW. 🎟️ Get tickets now: 💿 Pre-order on digital:
9
13
97
A #JTAGulator that you connect to via modem, JTAGulate itself to discover a hidden UART interface, and then control a motor driver to unlock other secret functionality @CypherCon!? Only from the mind of @whixr.
4
25
89
Extracting contents of SPI Flash memory with the I-don't-have-a-socket-and-there's-no-way-I'm-soldering-flying-leads-to-the-part technique: Reball, remount, reflow, read, rejoice!
2
13
92
My basic hardware hacking class + more advanced things on bonus day! In-person! Let's goooooo!.
🎬Did you watch the video where Joe hacked the #Crypto Wallet & recovered $2 Million & want to know how it how he did it?. 😎Hold your seats as @joegrand is coming to #hardwear_io USA to train you on fundamental #hardwarehacking concepts➡️ #hw_ioUSA2022
8
14
86
Announcing The World's Thinnest Boombox! Featuring @joegrand, @spux, @dualcoremusic, and @TDK_Corporation in a spectacle of art, music, and engineering!
11
28
83
My #OpticSpy project is now live on @Crowd_Supply! Explore optical data transmissions and decode secret messages hidden in blinkenlights.
1
35
85
Confessions of a Hacker: The @JoeGrand Story. Live #AltiumStory premiere at 12pm PST on February 6! I've never let a camera crew this much into my life. What could go wrong?
3
33
85
#JTAGulator version 1.12 (aka the @samykamkar edition) has arrived! Includes a new command to run all available scans (GPIO, JTAG, SWD, UART) and other UI improvements.
2
17
86
Seeing people enjoy the badge makes the challenges, late nights, and stress worth it. Thank you!.
My feelings on the badge this year. 7+ years of security cons and it's the most elegant, practical one I've ever seen. Love that it encourages engagement. Nice work @joegrand & @defcon! #HackerSummerCamp #DEFCON #DEFCON27
3
9
77
A decade (!) after Prototype This, I'm finally putting together some ideas for another STEM-focused TV show. Production company inquiries welcome :)
8
19
83
#JTAGulator version 1.10 has arrived! Includes UART automatic baud rate detection and JTAG adaptive clocking (RTCK) discovery.
2
28
80
#JTAGulator demonstration w/ Raspberry Pi Zero W for #BHEU Arsenal Labs. If you want to play along at home, the notes and necessary files are here:
1
26
78
Successful "Heart of Darkness" attack on a Microchip PIC18F452 thanks to @FoolsDelight (. Dumper code loaded into boot block, protected program memory blocks (designated by 0xAA-0xDD) exfiltrated through UART.
5
21
76
#JTAGulator version 1.11 has arrived! Includes a JTAG Pin Mapper (aka EXTEST Scan) that associates the physical pins of a target chip with their positions in the Boundary Scan Register.
1
34
72
If I only knew about this book as a teenager! Thanks to @deliciousgames for the special delivery.
5
9
70
🎙️Probably my most vulnerable interview yet. Catch Darknet Diaries: Kingpin now on Spotify or wherever you listen to podcasts!.
New episode: 155 Kingpin. In this episode, we delve into the multifaceted career of Joe Grand, also known as “Kingpin.” A renowned hardware hacker and computer engineer, Joe has been exploring and manipulating electronic systems since the 1980s.
6
6
79
Look at the size of this voltage regulator! 1mm x 1mm! Good thing I don't have to hand solder it!
5
3
73
Another mega sticker package from @jilles_com! I'll have these with me at @ToorCamp, #BHUSA, #DEFCON30, and #hw_ioNL2022 if you want some :)
4
11
69
