Remote

Stefan Gloor

@stgl@infosec.exchange

mastodon 4.8.0-alpha.3+glitch

I like to develop and break embedded things🐧

https://stefan-gloor.ch

208 Followers

176 Following

8 Posts

Joined December 29, 2023

Stefan Gloor @stgl@infosec.exchange

· 10mo ago

Reverse-engineering a custom USB HID protocol, bypassing microcontroller readout protection, and hacking firmware with a hex editor:

See my latest blog post at https://stefan-gloor.ch/pulseoximeter-hack

stefan-gloor.ch

Patching Pulse Oximeter Firmware

170

Stefan Gloor @stgl@infosec.exchange

· 5mo ago

Radio adventures

Stefan Gloor @stgl@infosec.exchange

· 6mo ago

Considering today's storage prices, every megabyte counts

Stefan Gloor @stgl@infosec.exchange

· 14mo ago

Having fun at #why2025
Meet me @ Swiss Village

Stefan Gloor @stgl@infosec.exchange

· 14mo ago

Meet me @ #why2025

I will have a talk on Monday:
https://program.why2025.org/why2025/talk/CXVW7V/

program.why2025.org

Die Hardcoded: Unlocking Yealink's (weakest) secrets WHY2025

During this talk we look at hardware and firmware reverse engineering, but also at corporate intimidation tactics and how to respond ethically as a security researcher. Leveraging the hard-coded AES keys, outdated software, and lots and lots of custom code we found, we were able to install "custom code" on some phones and access global customer configuration data by exploiting Yealink's global cloud provisioning service (RPS).

Stefan Gloor @stgl@infosec.exchange

· 12mo ago

After hours of debugging I figured out that I accidentally ordered GD32F350R8T6 instead of GD32F350RBT6, with the latter having twice as much flash memory. Explains why the firmware doesn't fit.

Stefan Gloor @stgl@infosec.exchange

· 14mo ago

@ph00lt0@mastodon.social thank you so much <3

Stefan Gloor @stgl@infosec.exchange

· 5mo ago

Replying to

@unaegeli @jonasgraphie @f @adfichter @GrapheneOS Mich warnt die UBS-App, dass sie bald nicht mehr funktionieren wird auf meinem GrapheneOS mit gelocktem Bootloader.