this post was submitted on 08 Mar 2025
939 points (93.5% liked)

Technology

64937 readers
4057 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Source Link Privacy.Privacy test result

https://themarkup.org/blacklight?url=https%3A%2F%2Fwww.tarlogic.com%2Fnews%2Fbackdoor-esp32-chip-infect-ot-devices%2F&device=mobile&location=us-ca&force=false

Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices. Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls.

Update: The ESP32 "backdoor" that wasn't.

(page 3) 50 comments
sorted by: hot top controversial new old
[–] RememberTheApollo_@lemmy.world 12 points 1 day ago (14 children)

I couldn’t find a list of devices. Anyone else find one?

load more comments (14 replies)
[–] mp3@lemmy.ca 21 points 1 day ago

One more reason to have actual open-source drivers instead of binary blobs..

[–] CosmoNova@lemmy.world 19 points 1 day ago (3 children)

Not the first time a backdoor was found on Chinese made hardware and it won‘t be the last time. Decoupling can‘t happen quickly enough.

[–] surewhynotlem@lemmy.world 17 points 1 day ago (1 children)

Which government's backdoors would you prefer?

"We know you have a choice in oppressive governments, so we appreciate you choosing ours."

[–] starman2112@sh.itjust.works 12 points 1 day ago (11 children)

None of them, that's why the only things in my house that connect to the internet are my computers, game consoles, and cell phone

load more comments (11 replies)
[–] randompasta@lemmy.today 17 points 1 day ago (1 children)

True, but the ESP32 is used by a lot of devices. This backdoor is pretty huge in scope of devices impacted.

load more comments (1 replies)
[–] GrizzlyBear@lemmy.world 7 points 1 day ago

I mean, most users here are browsing using a device with an AMD or Intel CPU, both with known backdoors. Not the first time a backdoor was found on American made hardware and it won't be the last.

[–] EndofLife@feddit.org 5 points 1 day ago* (last edited 1 day ago)

Jokes on them, I live in America when all that shit was already being done.

[–] nicky7@lemmy.ml 4 points 1 day ago

I read in another article that the identified 28 backdoor commands.

[–] SpaceNoodle@lemmy.world 9 points 1 day ago (4 children)

Is this some hardware flaw, or just something in their standard BT stack?

[–] bedouin@infosec.pub 3 points 19 hours ago

I was wondering the same thing. Wasn't clear on whether these backdoors are there on purpose or because of mistakes

load more comments (3 replies)
[–] mystik@lemmy.world 6 points 1 day ago (2 children)

I have a bunch of ESP32's that ... I can update and replace the firmware on, if i reset it the right way with a usb cable. the web site doesn't explain it any way how this is any worse than that...?

[–] embed_me@programming.dev 6 points 1 day ago

The website is also the guy trying to sell the solution so I'm just sceptical for now

[–] catloaf@lemm.ee 4 points 1 day ago

This can be done wirelessly, if the custom driver has been installed.

load more comments
view more: ‹ prev next ›