I found an amazon basics color changing smart light bulb attached to a lamp my neighbor threw in the apartment dumpster.

[snoopj@hachyderm.io]

@MLE_online I'd be surprised if they took effort to lock people out, but I guess it's possible that they use a blanket approach with code signing, since it *does* represent attack surface

[mle_online@social.afront.org]

@pearofdoom those 8 pins are what connects to the led board. I don't know anything beyond that

[mle_online@social.afront.org]

@SnoopJ yeah but there's also the matter of me having to figure out how to reverse engineer everything else so I can come up with some code to control the LEDs and connect to it over WiFi

[snoopj@hachyderm.io]

@MLE_online I was wondering if you wanted to re-use that hardware, but I'm not shocked that you're thinking along those lines, yea.

here's hoping

[mle_online@social.afront.org]

Brute force works

[andres4ny@social.ridetrans.it]

@MLE_online @SnoopJ You've seen https://github.com/wilco375/ESP-Firmware-Toolbox ?

EDIT: and RX/TX pins are shown on page 9 of https://documentation.espressif.com/esp32-pico-v3-zero_datasheet_en.pdf . Not sure which one is GPIO0.

[mle_online@social.afront.org]

@SnoopJ what else would someone do?

[edrei@mastodon.sdf.org]

@MLE_online We had a stove with a built-in air fryer that required access to a wifi network. Why???

[sylvhem@eldritch.cafe]

@MLE_online

[snoopj@hachyderm.io]

@MLE_online I was thinking from a perspective of "an ESP32 is generally useful for lots of things" (assuming it hasn't been locked out with secure boot)

I guess an instinctual slide into thinking about rescuing microprocessors etc. from landfill and putting them to other purposes, which I think about not-infrequently

but of course re-using the LEDs and associated fixins would be nice too

[larrybiggs@infosec.exchange]

@MLE_online I like to think of it as percussive maintenance lol

[20002ist@thepit.social]

@blogdiva @MLE_online

[ruenahcmohr@infosec.exchange]

@MLE_online the tip of the socket is a ribbed pin that can be force-pulled out, it locks in a wire.

[andres4ny@social.ridetrans.it]

@nickzoic @MLE_online The part poking into the LED area is the antenna. The rest of the board is fine inside of the base of the bulb surrounded by metal, but that faraday cage ain't going to work for the the wifi antenna.

[mle_online@social.afront.org]

It's free! And it looks like all the relevant pins are broken out

[scribblesonnapkins@mastodon.social]

@SnoopJ @MLE_online
Going at it with power supply tricks to glitch around the security and reflash could itself be valued science.

Likewise microprobing with narishige micromanipulators on the die to get past it might be cool too.

[mle_online@social.afront.org]

@SnoopJ oh yea, that would be a good thing, too. It just already have a bunch of esp32s around here though

[snoopj@hachyderm.io]

@scribblesonnapkins guessing that's beyond the scope of what @MLE_online is after here, but it *is* making me wonder what people have done in this vein to try and defeat the secure boot

[mle_online@social.afront.org]

@scribblesonnapkins @SnoopJ I wouldn't know how to do any of that

[andres4ny@social.ridetrans.it]

@MLE_online Oooh that's handy!