26th September 2021, 9:27 PM
Security can be fun but also not at the same time. I would never do it as a job, and underground scenes are worse.
I co-wrote and published a paper with some friends a while back on nintendo switch security. I did the part on the Tegra security co-processor (real fun thing). That was probably the one good thing that came from that.
That thing had all kinds of security features to prevent the security payload from being compromised (signed payloads, special mechanics to transfer code exec to other payloads).. but it failed to address payload downgrade exploitation lol. That on top of it leaking hashes on the heap that allowed me to sign my own first stage payload among other things.
I co-wrote and published a paper with some friends a while back on nintendo switch security. I did the part on the Tegra security co-processor (real fun thing). That was probably the one good thing that came from that.
That thing had all kinds of security features to prevent the security payload from being compromised (signed payloads, special mechanics to transfer code exec to other payloads).. but it failed to address payload downgrade exploitation lol. That on top of it leaking hashes on the heap that allowed me to sign my own first stage payload among other things.
