My DEF CON talk "Hacking jetskis - from Sea-Don't to Sea-Doo" got accepted 🥳 We'll be having some good fun - such as bypassing the immobilizer using a custom Flipper Zero app, building a custom diagnostic adapter, and some big plot-twists 🛥️

Opposite of solder-pr0n: Messed up the stencil solder application and was hoping for surface tension to fix it for me 🥲 The expired paste probably didn't help either

This guy doesn’t even use AI for bug hunting 🙄

Non-technical teams are now shipping production vulns

Told someone their "vulnerability report" is bs (result of an automatic scanner that has a false positive...) This was the response 😑

Sometimes it’s nice to go back to basics: Built firmware that’s just 246 bytes, uses no RAM at all, and runs parasitically from a 1-wire bus at just 0.2 mA. Yet it emulates a full jetski key! You can see voltage rising until the chip starts running based on the BOD threshold.

If you ever lose the keys to your older Sea-Doo Jetski you might find these bytes useful when talking to the ECU😇 95 BC 2F 02 04 A4 75 BE

Option A: Upgrade iPhone to iOS26 and have to use liquid glass Option B: Get pwned by DarkSword malware I don't know which one is worse

Put that thing on a pole and call it the BLE swiffer.

Sometimes, you simply need Bluetooth HIGH Energy📡

If the datasheet says to use tantalum capacitors - then use tantalum capacitors! Blue = Ceramics Yellow = Tantalum

Simple age check for Linux: Just have the shell ask the user to check the host IP on first boot. If they type ifconfig they are old enough, if they type ip addr they deserve to be restricted from their computer 😇

Things I didn’t see coming: apparently I own a Game Boy signed by a Eurovision contestant?! 😆 youtu.be/8XR2RvfZ-68

No JLC, component placement is not correct 😂

Won today’s bet of “Do I really have no oil pressure, or is the gauge just broken?” 😅

Wow, used Yamaha 01V96 are a steal - and 17 motor faders are a lot of fun 😀

Yes VSCode, I obviously want to use the color-picker to edit the address offsets in Arm assembly 😂

Fancy, the board-house sent me x-rays of my PCBs!

My first post on the RaspberryPi Blog 😍 We've extended the RP2350 side-channel hacking challenge to April 30 - and even better: To make attacks for the challenge easier, we decided to disable the random chaffing and some more mitigations! www.raspberrypi.com/news/rp2350-...

The new AirTags 2 just arrived! Time to take them apart 🧵

Laser fault-injection drip just dropped

En route to #39c3 - come to our talk at 4pm! I will only be there today and tomorrow, but happy to meet-up & chat. Also, if you are at #39c3 and often dump SPI flash-chips please let me know, I might have something for you that I'm looking for feedback on 🙂

Work: Fix rust issues 🦀 Hobby: Fix rust issues 👨‍🏭 😭

Call for flash-chips at DEF CON! If you have leftover or rare SPI flash-chips that I can have for testing some tooling I’m building I’d be very thankful. Also if you have devices where you had trouble dumping in-system I’d love to give it a try. I’ll be at Embedded Systems Village :)

DigiKey goes brrrrrrrt

Why do so many aspects of my life involve connecting FT232s to random pins 😂

Finally, ClimateGPT✨

AMA request: The person that keeps uploading 64MB text-files to the Black Hat CFP

Does someone know whether it's possible to get recorded traces from a Rigol DHO800/900 using SCPI? :RECord:WREPlay:FCURrent 2 :WAV:DATA? ...does not seem to work

Having some fun with EM measurements today - side-channels are awesome!

Wanted to slightly warm up the chip with a heat-lamp and ended up melting the jumper-wires 🔥😅

Okay going to have @liveoverflow.bsky.social make all silkscreens for me going forward :D

Wow modern cars suck. A relay is not opening/closing reliably. The relay is epoxied into a PCB assembly. Replacement cost for the 5EUR (being generous here) relay is 400EUR because you can only buy the entire assembly.

Are you teaching or warning?

Business idea: Amazon but with original products instead of counterfeit ones. Pretty sure there’s a market there.

Dared to call German customs, was starting to describe my situation (nicely) and immediately got interrupted and yelled at. Wow.

The German customs system is so hopelessly broken... It's faster to send something from the UK to Finland, import it there, and then forward it to Germany than trying to import something from the UK to Germany directly.

Electronic music or something, idk I'm not a DJ

Looks like Garmin released an update causing a boot loop, how nice of them to celebrate the return of Pebble like that 😊

This afternoon I asked Ole about a bug with Frida & iOS simulator. 2 hours later he had a fix committed and just now he published a new release including the fix ❤️ Absolute legend, thanks for everything you do. frida.re/news/2025/01...

Reason 516 why you should work with lasers: You get to wear cool sunglasses all day 😎

Me: Today I’ll go to bed early! My fuzzer just before bedtime:

Finally giving backside IR imaging a try

Waking up to fresh microscope parts 🥰

Wow, some of the articles on my ACE3 research are so bad... No, you are not facing any "new security risks" because of the "critical USB component"

Does anyone have a live-build config that successfully generates an Arm64 Ubuntu image?

Tried to get an appointment to get a new national ID. Now I have three vulns in their webapp and still no appointment. 😐

Moxa must be banned in all critical infrastructure. Probably the least responsible player in the industry.

Does someone happen to have a copy of the tangara-hw git repo and could push it to Github? The official repo is 502ing right now git.sr.ht/~jacqueline/...

Randomly found these cool 3D printable probes by for the Omnifixo that use a jumper-wire as probing needle. Especially the version with the 5 cent coins as weight works great! Might have to make a version with pogo pins :) Awesome work, IsTim! makerworld.com/en/models/51...