Replies (21)

Default avatar
npub1j5er...2kek 9 months ago
While things like Bluetooth or USB are typically safe, still better to avoid them. That's why I use my Jade in stateless mode, no BT version of the firmware, and via QR.
2 replies ↓
YODL's avatar
YODL yodl@nostr.land 9 months ago
In total, they found 29 undocumented commands, collectively characterized as a "backdoor," that could be used for memory manipulation (read/write RAM and Flash), MAC address spoofing (device impersonation), and LMP/LLCP packet injection. Espressif has not publicly documented these commands, so either they weren't meant to be accessible, or they were left in by mistake.
j̶a̶r̶e̶d̶'s avatar
j̶a̶r̶e̶d̶ jdncrypt@nostrplebs.com 9 months ago
"The researchers warned that ESP32 is one of the world's most widely used chips for Wi-Fi + Bluetooth connectivity in IoT (Internet of Things) devices, so the risk of any backdoor in them is significant."
semisol's avatar semisol
Backdoor found in ESP32 chips that allow arbitrary memory access and more remotely via Bluetooth
BleepingComputer
Undocumented commands found in Bluetooth chip used by a billion devices
The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands th...
View quoted note →
Hazey's avatar
Hazey hazey@iris.to 9 months ago
This has "intelligence" agency written all over it, and given the 2014 WikiLeaks revelations, guaranteed to be supply chain attacked into most consumer products.
1 replies ↓
Hazey's avatar
Hazey hazey@iris.to 9 months ago
It can be safely assumed that most peoprietary chips have backdoors used by terrorist "intelligence" agencies such as the NSA and CIA, this one just happened to be discovered.
semisol's avatar semisol
Backdoor found in ESP32 chips that allow arbitrary memory access and more remotely via Bluetooth
BleepingComputer
Undocumented commands found in Bluetooth chip used by a billion devices
The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands th...
View quoted note →
1 replies ↓
↑