Rafael Boix

Embedded systems security stuff. Perfect security does not exist, good enough security does.

[Kevin2600 @Kevin2600]

Ladies and gentlemen, it is my honor to presenting you the Rolling-Pwn attack research on Honda Keyfob system. (https://t.co/UqJEJofxtr)

[Ileana Buhan @ileanabuhan]

I made an overview of the tools which can be used to secure crypto implementations against physical attacks https://t.co/E3Ld7fp83W Presentation is coming soon for #asiaccs. Work with @yuvalyarom @lejla_batina @pschaumont

[offensivecon @offensive_con]

Bug Hunting S21’s 10ADAB1E FW by @ffmenarini and @jmartijnb https://t.co/m5jGMdOOQA

[Rafael Boix @rafabxc]

It was a blast to see f2f all the amazing ppl & awesome research at #hw_ioNL2021 ! Demo gods were not nice(laptop worked after reboot when talk finished, see pic 🥲),but hope main idea was clear. If you have FI/SW exp questions or want to discuss anything: feel free to ping back!

[Black Hat @BlackHatEvents]

In this #BHEU Briefing @jmartijnb shows how they gained root by inserting a malicious USB device that exploits a forgotten vulnerability in the USB stack of the Linux kernel, known as CVE-2016-2384. Learn more here: https://t.co/TLTCFNzuPD

[hardwear.io @hardwear_io]

🔥Its now or never! ⏰Just 24 hours to go to grab your #Conference Tickets for #hardwear_io Netherlands 2021

😎Cracking Line of Speakers & What an opportunity to meet them

😉Few of them have already arrived at the venue👊

🎟️Get it here➡️https://t.co/iAZ4mPkks5

#hw_ioNL2021

[hardwear.io @hardwear_io]

🔥#Speaker🎙️Talk Alert! #hardwear_io NL #Conference

⭐Rafael @rafabxc & Federico will show, how a combined Fault Injection (FI) + Software Exploit attacking approach can fully compromise the target system security domain

😎Get your tickets➡️https://t.co/BbXABMkIyi

#hw_ioNL2021

[Keysight Device Security Testing @Riscure]

In the end of October, we are also attending the https://t.co/z0DatAtWZe in the Netherlands, where Riscure experts (🍩 Jasper van Woudenberg, Rafael Boix Carpi and Federico Menarini) have 2 presentations. Join the event with our discount code: welovefi.

[Rafael Boix @rafabxc]

Time to share the good news: Federico Menarini and I will be presenting some research results and insights about combined attacks (FI + SW exploitation) at #hw_ioNL2021 this October. Looking forward to the conference! https://t.co/kZ6FdiQQrz

[Rafael Boix @rafabxc]

Got some great news this afternoon, hopefully I can share more info in the next couple days! Stay tuned if you're interested in combined FI + logical attacks :)

[Rafael Boix @rafabxc]

ISO/SAE 21434 is finally published - amazing milestone for automotive security. It's also important to realize that it says "what" to do wrt security, but doesn't dictate "how" to do things: security is all about details, interesting & fun times ahead! https://t.co/ZfY5RWHCdP

[Rafael Boix @rafabxc]

@jmartijnb @ileanabuhan +1 to https://t.co/gWSNaUNq3G

[Ileana Buhan @ileanabuhan]

I wanted to write a small tutorial on perceived information and it’s application for side channel analysis. Instead I created a little monster of a blogpost. Hope it’s useful https://t.co/pjXhLGv6pN

[Rafael Boix @rafabxc]

@noopwafel That mini-heart-attack when you notice something is on fire before the session starts & the pride+joy that you can pull off such a thing: memorable moments when delivering a lecture/training :)
Not everyone can deliver a live lecture ad-hoc, hats off!

[Rafael Boix @rafabxc]

Doing EM analysis on a serious crypto device: ✅

[Rafael Boix @rafabxc]

@noopwafel Tested diy camera phone holders:
a) Put phone inside a big >500 page book (e.g. the security engineering book), use a rubber band to keep book closed. Paper friction works quite ok to keep phone in place. Use smaller books for adjusting big book tilt.
2) Build a lego contraption.

[Rafael Boix @rafabxc]

@YashinMehaboobe @jzvw Nice example of LowCostButStillWorks EM FI hack, indeed

[hardwear.io @hardwear_io]

🚗Get to know, what strong 🔒 security foundation in automotive products are required to design secure components

✅Join us for the Webinar with Rafael @rafabxc Principal Trainer & Security Specialist @Riscure https://t.co/Mpdk1WJFcS

#hardwaresecurity #AutomotiveSecurity

[Rafael Boix @rafabxc]

@Quorth This made my day much better, will include this in training reference materials 😄

[Praveen Vadnala @side_channels]

I will be talking about controlling program counter on RISC-V using fault injection. Register below if you are interested.