New blog on exploring AMD Platform Secure Boot including common misconfigurations and implementation issues. Enjoy the read at labs.ioactive.com/2024/02/explor… #AMD #Firmware

Our Black Hat talk 'Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers' has been uploaded to youtube for those who missed it.
youtube.com/watch?v=Qrwlzo…

The abstract, whitepaper and slides are here: blackhat.com/us-23/briefing…

n3k sen

🎲 Hackers Rig Casino Card-Shuffling Machines for ‘Full Control’ Cheating

BlackHat presentation: access camera inside Deckmate 2 shuffler to learn the exact deck order—& hand of every poker table player

By droogie, n3k, sen

wired.com/story/card-shu…

Wow, really interesting to hear this and thanks for the validation! We were told by many people that the idea of plugging a device under the table was 'highly unrealistic'.
n3k
sen

Enjoyed doing this research with n3k and sen . We have a detailed white paper that will be released sometime over the next few weeks which should give a lot more context for those who were not able to attend the presentation

⏰⬅️🚗💨⚡️Back to the Future with Platform Security, by Krzysztof Okupski (Krzysztof Okupski)

This is a new blog post summarizing some of the AMD research n3k, Krzysztof Okupski and I presented at HWIO. In addition, we have also released our slides and updates to Platbox utility with new features and POCs. Feel free to run it against your AMD platforms and find bugs :)

New IOActive Labs blog: Applying Fault Injection to the Firmware Update Process of a Drone: labs.ioactive.com/2023/06/applyi… - By Gabriel Gonzalez IOActive, Inc #hardwarehacking

Happy to announce that we will be presenting 'Shuffle Up and Deal: Analyzing the Security of Automated Card Shufflers' at Black Hat this August! blackhat.com/us-23/briefing…
#BHUSA n3k sen IOActive, Inc

So it turns out Rust == PC Bros: youtube.com/watch?v=wXF8MI…

New updates on Platbox (github.com/IOActive/Platb…):
- Code refactored into an easy to use lib
- New features to interact with the SPI controller
- New checks over the SPI locks
- Fixed some bugs
Stay tuned for upcoming vuln writeups! IOActive Labs IOActive, Inc droogie Krzysztof Okupski

Our team has released a new blog on UEFI security and coordinated disclosure challenges: labs.ioactive.com/2023/02/advent…
IOActive, Inc n3k Krzysztof Okupski droogie

New writeup about an unlocked TSEG in the Acer Swift 3 model, resulting in full SMM access: labs.ioactive.com/2022/11/explor…
You can verify if your system is properly locked with Platbox: github.com/IOActive/Platb…
IOActive, Inc #Acer #SMM #AMD #firmware Krzysztof Okupski n3k droogie