We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·Jun 26·5 min read
usbliter8: An A12/A13 SecureROM exploit
TL;DR
A vulnerability existed in the USB controller of Apple A12 and A13 systems on chips (SoCs), which was not accessible through standard USB stacks. The usbliter8 tool was developed to exploit this low-level bug using Raspberry Pi's RP2350-based microcontroller boards.
✦ Why It Matters
Engineers can leverage this exploit to understand and address vulnerabilities in modern SoCs.
Key Takeaways
- Explore low-level USB vulnerabilities in SoCs.
- Utilize Raspberry Pi for hardware exploitation.
- Investigate implications of firmware access.
- Consider security improvements for device architectures.
Full Summary
Apple's A12 and A13 SoCs, used in various devices, contain a low-level bug in their USB controller that is typically unreachable by standard USB stacks on Mac or PC. To exploit this vulnerability, the usbliter8 tool was created, utilizing Raspberry Pi's RP2350-based microcontroller boards to interface with the affected hardware.
This tethered bootrom exploit allows researchers and engineers to gain access to the device's firmware, which could lead to further security research or unauthorized modifications. While A12X and A12Z SoCs could theoretically be supported, this implementation is not yet available.
The findings demonstrate a significant security gap in Apple's hardware, highlighting the need for improved security measures. This exploit could pave the way for further research into hardware vulnerabilities and their implications for device security.