<story><title>ESP32/ESP8266 Wi-Fi Attacks</title><url>https://github.com/Matheus-Garbelini/esp32_esp8266_attacks</url></story><parent_chain></parent_chain><comment><author>fra</author><text>First and foremost, this speaks to the ubiquity and hacker friendliness of Espressif&amp;#x27;s chips. Most of their competitors (I&amp;#x27;m looking at you, Broadcom), prefer security through obscurity and make it extremely difficult to get access to chips, let alone SDKs. I am certain that similar vulnerability exist in every embedded WiFi chipset out there.&lt;p&gt;That being said, the status quo is completely untenable. Connectivity has become the norm in the hardware space, and it is built on a shoddy software foundation. Vendor SDKs are often best effort endeavors provided &amp;quot;as is&amp;quot; with no thought given to security or reliability. The results are clear: &amp;quot;the S in IOT stands for security&amp;quot; has become a trope, and connected cameras, locks, washing machines, and many more are getting owned on a weekly basis.&lt;p&gt;This will change, and whoever cracks this nut will be very successful indeed.</text></comment>
<story><title>ESP32/ESP8266 Wi-Fi Attacks</title><url>https://github.com/Matheus-Garbelini/esp32_esp8266_attacks</url></story><parent_chain></parent_chain><comment><author>Etheryte</author><text>For those unfamiliar with the topic, these two chips are by and far the most common wifi chips for DIY and are also very common in IoT devices. Due to cheap price ($2—$5 depending on the model) and very low barrier to entry technically, these devices are both very popular as well as very wide spread in those two categories.&lt;p&gt;These chips are the first hits for searches such as &amp;quot;Arduino wifi module&amp;quot;, &amp;quot;breadboard wifi&amp;quot;, &amp;quot;IoT wifi module&amp;quot;, and many, many more as they&amp;#x27;re the downright easiest way to add wifi to something that doesn&amp;#x27;t have it out of the box.&lt;p&gt;I&amp;#x27;m not sure how applicable these attack vectors are in the real world, but they affect a very large number of devices for sure.</text></comment>