Mastodon Feed: Post

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

"The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands that could be leveraged for attacks.

The undocumented commands allow spoofing of trusted devices, unauthorized data access, pivoting to other devices on the network, and potentially establishing long-term persistence."

https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices/

see also this 2012 paper:

https://www.cl.cam.ac.uk/~sps32/Silicon%5Fscan%5Fdraft.pdf