I found an amazon basics color changing smart light bulb attached to a lamp my neighbor threw in the apartment dumpster.

[snoopj@hachyderm.io]

@scribblesonnapkins @MLE_online it looks like the kind of fault injection you're thinking of was performed on a cousin chip, I would guess the secure boot is pretty much the same across the family of chips and would be susceptible to the same attack:

Espressif ESP32: Bypassing Secure Boot using EMFI

Raelize provides top-notch embedded device security serrvices like consultancy, testing, research and training.

(raelize.com)

pretty neat, I like that write-up quite well

[ruenahcmohr@infosec.exchange]

@MLE_online oh easy, but I bet someone would beat me to it. so, I'll hold off trying.

[mle_online@social.afront.org]

@RueNahcMohr what if everyone says that and no one does it?

[johns_az@mastodon.social]

@MLE_online I remove conformal coating (which is usually silicone-based) with acetone. Maybe put some on the pcb and let it work its way under the blob?

[ruenahcmohr@infosec.exchange]

@MLE_online then there will still be someone who tips first and finishes before I do.
I would like to see the blob side of the pcb tho.

[mle_online@social.afront.org]

@RueNahcMohr here you go. I got most of the blob off

[botvolution@mastodon.sdf.org]

@MLE_online
Aside from everything else, it is simply utterly ridiculous to have a computer in a fucking lightbulb.

[mle_online@social.afront.org]

@botvolution that's because it's not a lightbulb. It's bezosnet spying device

[meaningfulbits@mastodon.social]

@MLE_online #Amazon is notorious for crippling products to force their walled garden.

[mle_online@social.afront.org]

It looks like it's specifically one of these

ACK Solution

Espressif offers an easy way for users to build Alexa-connected devices with Espressif’s Alexa Connect Kit (ACK) hardware and software.

Espressif Systems (www.espressif.com)

[steter@mastodon.stevesworld.co]

@MLE_online @RueNahcMohr That looks like a wireless card attached to a power supply. The blob may have the logic underneath. It might be a gate array, if they don't need to ever change the IP they talk to. Some companies hate paying programmers, and who needs a CPU, anyway? I haven't noticed anything to store the IP data yet, but I'm more software/firmware than hardware. It probably isn't socketed, because that would cost money in the form of pennies. Product numbers off of the stuff under the blob would be helpful.

[vxo@digipres.club]

@MLE_online @botvolution The EnshittiBulb

on that same note I'm planning on writing my state representatives about AB 2047 because that just sounds like an absolute License to Enshittify for the few 3d printer manufacturers who would jump through all those hoops and probably do it by tying their devices, including ones bought with public funding for schools, to a cloud service that can just Go Away and brick the printers, or force you to buy the manufacturer's own RFID tagged filament

[maehw@chaos.social]

@MLE_online dump its firmware.

[mle_online@social.afront.org]

@steter @RueNahcMohr It's an ESP32 pico v3 zero attached to a power supply

[mle_online@social.afront.org]

@maehw I don't know how to do that

[mle_online@social.afront.org]

@vxo @botvolution You should explain what AB 2047 is for people who don't know what that is.

The lawmaker proposing that bill is also proposing to require drivers licenses for ebike. She's on a roll with stupid ideas right now

[scruss@xoxo.zone]

@botvolution @MLE_online many not-so-smart lighbulbs have an 8-bit microcontroller on them. I saw an emulation of the Manchester SSEM running on one once

[steter@mastodon.stevesworld.co]

@MLE_online @RueNahcMohr Cool. Cheaper than making an assembly line. Neat use for it.

[ruenahcmohr@infosec.exchange]

@MLE_online 32 pin...

[mle_online@social.afront.org]

@RueNahcMohr so it will be an exciting challenge for you!