bk99.de entertain the web since 1997

bk99.de
hanez.org · Hardware securityCurated

Passkey gets a touch-sensitive trigger

Summary

Johannes replaces the previous push button of his Passkey project with a touch surface and plans a final enclosure. The project repository was renamed from passkey to Passkey. The new button works by touch.

Ideas

  • The program logic stays the same despite the new input technology.
  • A touch sensor improves operation without mechanical wear.
  • A 3D-printed enclosure is meant to turn the prototype into a permanent device.

Insights

  • Good hardware abstraction allows input components to be swapped without rebuilding the application.
  • The step from breadboard to enclosure reveals new questions of security and maintenance.

Facts

  • Johannes plans a 3D-printed enclosure.

Recommendations

  • Debounce the touch sensor and suppress interference against accidental triggering.
  • Protect stored secrets against simple readout of the controller.

References

Read the original article on hanez.org

Search the Web Archive

Own project · 2016

USB Killer vs. IBM T22: 1:0 to the stick

In October 2016 I plugged a USB Killer into a retired but still working IBM ThinkPad T22, and afterwards it was dead. This post explains how the small device takes the energy for its attack from the victim’s USB port and why almost any hardware loses. It also answers the question why you would not simply use 230 volts, and shows what this means for protecting your own devices.

CCC · 2015

Rowhammer.js: Hardware faults from the browser

Clémentine Maurice and Daniel Gruss show how repeated memory accesses cause DRAM bit flips and how even JavaScript can become a hardware-level attack surface. Rowhammer.js demonstrated a remote, software-induced hardware fault from JavaScript. Abstraction boundaries do not prevent attacks on shared physical resources.

HN · 2013

Hard disk firmware offers persistent root access

Sprite_tm examines a hard disk controller and shows how modified firmware can manipulate data traffic and survive reinstallations. The experiment used an ordinary SATA hard drive. The controller contained an ARM processor.