Top all-time · #4017
Yifan Lu
Personal blog · yifan.lusecurityhardware
Yifan Lu's personal blog at yifan.lu covers security and hardware. Since 2011, 19 different Hacker News readers have linked it 21 times, most often “Attacking Hardware AES with DFA (2019)”. The last post was in 2022, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers cite these posts on hardware and security research: a PS5/Switch exploit explanation, a fault-injection attack that extracts Nvidia TSEC AES keys, and a ripgrep musl segfault analysis.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Attacking Hardware AES with DFA (2019)6 people · 6 mentions · first linked 2019-02-22
- The 3DS Cryptosystem2 people · 2 mentions · first linked 2016-04-07
- Injecting Software Vulnerabilities with Voltage Glitching [pdf]2 people · 2 mentions · first linked 2019-01-28
- Glitching a $20k Piece of History2 people · 2 mentions · first linked 2019-08-17
What Hacker News says?
It's a different exploit. The original exploit is an issue with the Tegra's recovery mode (RCM), requiring a USB payload to be sent to the Switch at boot every time. I believe the hardmod is a voltage glitching exploit, as described for the Vita here: https://yifan.lu/images/2019/01/Injecting_Software_Vulnerabi... . It is able to inject code through the onboard memory then load a payload from a memory card rather th…
Comment linking /images/2019/01/Injecting_Software_Vulnerabilities_with_Voltage_Glitching.pdf
on “The PS5 Has Been Jailbroken”Submitted Kindle Touch jail broken via ID3 Tag as a story · 187 points
HN discussionThat's covered in the referenced article, https://yifan.lu/2019/02/22/attacking-hardware-aes-with-dfa/ , in the `Extracting keys` section
Comment linking /2019/02/22/attacking-hardware-aes-with-dfa/
on “Full key extraction of Nvidia TSEC”Submitted The 3DS Cryptosystem as a story · 120 points
HN discussionSee here: https://yifan.lu/2019/02/22/attacking-hardware-aes-with-dfa/
Comment linking /2019/02/22/attacking-hardware-aes-with-dfa/
on “Full key extraction of Nvidia TSEC”Submitted PlayStation Vita Exploit Reverse Engineering Challenge as a story · 113 points
HN discussionMaybe, or maybe not. Presumably that "more detailed write-up" would be something like the third footnote: https://yifan.lu/2019/02/22/attacking-hardware-aes-with-dfa/ . Despite being much more detailed, I still felt just about as dumb! :)
Comment linking /2019/02/22/attacking-hardware-aes-with-dfa/
on “Full key extraction of Nvidia TSEC”Submitted Hacking the PS Vita as a story · 86 points
HN discussionI tried reading and gave up at the "Headline"... Quoting from the bug analysis: >Headline. The crash is real and reproducible. With musl instrumentation we pin the in-process mechanism precisely: a thread's own store to a freshly- faulted anonymous page becomes invisible to that same thread's reload ~10 instructions later, because the page's backing is replaced mid-function. A pagemap read at the instant of the faul…
Comment linking /2019/01/11/the-first-f00d-exploit/
on “RipGrep musl binaries occasionally segfault during very-large searches”Submitted Injecting Software Vulnerabilities with Voltage Glitching [pdf] as a story · 49 points
HN discussionSubmitted Attacking Hardware AES with DFA (2019) as a story · 15 points
HN discussionSubmitted Attacking Hardware AES with Differential Fault Analysis (DFA) as a story · 4 points
HN discussionSubmitted Attacking Hardware AES with DFA as a story · 4 points
HN discussionSubmitted T-Mobile Proxy Trick as a story · 2 points
HN discussionSubmitted Glitching a $20k Piece of History as a story · 2 points
HN discussionSubmitted Docsis Modem Cloning for Fun (But Not Profit) as a story · 2 points
HN discussionSubmitted HENkaku: Vita homebrew for everyone as a story · 2 points
HN discussionSubmitted The 3DS Cryptosystem as a story · 2 points
HN discussionSubmitted Glitching a $20k Piece of History as a story · 1 points
HN discussionSubmitted PS Vita HDMI Mod Attempt as a story · 1 points
HN discussionSubmitted Yes, it's a kernel exploit as a story · 1 points
HN discussion
