Top all-time · #4492
Tarlogic Security
Company blog · tarlogic.com/blogsecurity
Tarlogic Security is the company blog at tarlogic.com, writing about security. Since 2017, 17 different Hacker News readers have linked it 18 times, most often “Backdoor detected in ESP32 Espressif IoT chip”. No feed was found, so read it on the site itself.
Tarlogic has a team of high-level cybersecurity experts. We raise defenses against any present or future threat
Most-linked posts?
- Backdoor detected in ESP32 Espressif IoT chip4 people · 4 mentions · first linked 2025-03-08
- /news/hidden-feature-esp32-chip-infect-ot-devices/2 people · 2 mentions · first linked 2025-03-11
- Linux process infection – Tarlogic Security2 people · 2 mentions · first linked 2018-12-22
What Hacker News says?
It's the researchers itself call it a backdoor. Here's the announce on their website, in English https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...
Comment linking /news/backdoor-esp32-chip-infect-ot-devices/
on “Undocumented backdoor found in Bluetooth chip used by a billion devices”Submitted Backdoor detected in ESP32 Espressif IoT chip as a story · 25 points
HN discussionContext: https://www.tarlogic.com/news/hidden-feature-esp32-chip-infe... Both HN discussion [1] and blogs [2] mentioned that it was a nothingburger. tl;dr: there are undocumented debugging interfaces on the original ESP32 chip that can only be accessed by code running on the microcontroller or via another computer connected via the physical UART interface. No remote exploit possible. Espressif will now provide a pat…
Comment linking /news/hidden-feature-esp32-chip-infect-ot-devices/
on “ESP32 Undocumented Bluetooth Commands: Clearing the Air”Submitted Linux process infection – Tarlogic Security as a story · 5 points
HN discussionTimely post with the vulnerability research this week? https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...
Comment linking /news/backdoor-esp32-chip-infect-ot-devices/
on “Building an open-source Wi-Fi Mac layer for the ESP32”Submitted Tracking Ethereum blockchain attackers: Measuring sandwich attacks as a story · 2 points
HN discussionI'm sure some of these newly discovered undocumented commands could help. https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...
Comment linking /news/backdoor-esp32-chip-infect-ot-devices/
on “ESP32 WiFi Superstitions”Submitted Introduction to kerberos and kerberos-related attacks as a story · 2 points
HN discussion> I have to wonder if Espressif is considering legal action. As the article says, they worked with Tarlogic to provide a correction. So, probably not. https://www.tarlogic.com/news/hidden-feature-esp32-chip-infe...
Comment linking /news/hidden-feature-esp32-chip-infect-ot-devices/
on “Espressif's Response to Undocumented Commands in ESP32 Bluetooth by Tarlogic”Submitted Interactive Shell via BlueTooth as a story · 2 points
HN discussionhttps://www.tarlogic.com/blog/france-and-economic-intelligen... It appears to be more so that they just really suck.
Comment linking /blog/france-and-economic-intelligence/
on “Nvidia Offices Raided by French Law Enforcement”Submitted Open and Collaborative Bluetooth Security Assessment Methodology (BSAM) as a story · 1 points
HN discussionTrue, but either way the exploit needs to be addressed. While I agree the attack vector is pretty awful, I was just curious exactly what the exploit was. The article doesn't even mention it. It links to Apple, which is likely that 0-day 0-click that Pegasus uses (BLASTPASS). They report that as a flaw in PassKit though, which would not affect Android or Windows. That's why I was thinking the WebP overflow? That is a…
Comment linking /blog/cve-2023-4863/
on “Spyware can infect your phone or computer via the ads you see online – report”Submitted France and Economic Intelligence (2019) as a story · 1 points
HN discussionSubmitted Attacking QA Platforms: Selenium Grid as a story · 1 points
HN discussionSubmitted Linux Process Infection – Part 1 as a story · 1 points
HN discussionSubmitted Arecibo tool: endpoint for DNS and HTTP exfiltration as a story · 1 points
HN discussionSubmitted Fuzzing Tales 0x01: Yadifa DNS as a story · 1 points
HN discussion
