{"id":2736,"date":"2013-12-30T17:52:34","date_gmt":"2013-12-30T16:52:34","guid":{"rendered":"http:\/\/www.b.shuttle.de\/hayek\/Hayek\/Jochen\/wp\/blog-en\/?p=2736"},"modified":"2013-12-30T17:52:34","modified_gmt":"2013-12-30T16:52:34","slug":"bunnie-huang-on-hacking-microsd-cards","status":"publish","type":"post","link":"https:\/\/wp.jochen.hayek.name\/blog-en\/2013\/12\/30\/bunnie-huang-on-hacking-microsd-cards\/","title":{"rendered":"Bunnie Huang on Hacking MicroSD Cards"},"content":{"rendered":"<p>\t\t\t\t<span style=\"line-height: 1.5\">via \u00a0Nat Torkington&#8217;s f<\/span><a style=\"line-height: 1.5\" href=\"http:\/\/radar.oreilly.com\/2013\/12\/four-short-links-30-december-2013.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+oreilly%2Fradar%2Fatom+%28O%27Reilly+Radar%29\">our short links: 30 December 2013 &#8211; O&#8217;Reilly Radar<\/a>:<span style=\"line-height: 1.5\"><br \/>\n<\/span><\/p>\n<blockquote><p>In my explorations of the electronics markets in China, I\u2019ve seen shop keepers burning firmware on cards that \u201cexpand\u201d the capacity of the card \u2014 in other words, they load a firmware that reports the capacity of a card is much larger than the actual available storage. The fact that this is possible at the point of sale means that most likely, the update mechanism is not secured. MicroSD cards come with embedded microcontrollers whose firmware can be exploited.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>via \u00a0Nat Torkington&#8217;s four short links: 30 December 2013 &#8211; O&#8217;Reilly Radar: In my explorations of the electronics markets in China, I\u2019ve seen shop keepers burning firmware on cards that \u201cexpand\u201d the capacity of the card \u2014 in other words, they load a firmware that reports the capacity of a card is much larger than [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false,"_share_on_mastodon":"0"},"categories":[666],"tags":[],"class_list":["post-2736","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"share_on_mastodon":{"url":"","error":""},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/paO0kP-I8","jetpack_likes_enabled":true,"amp_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/2736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/comments?post=2736"}],"version-history":[{"count":0,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/posts\/2736\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/media?parent=2736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/categories?post=2736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.jochen.hayek.name\/blog-en\/wp-json\/wp\/v2\/tags?post=2736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}