Thanks to a flaw in a decade-old version of the RoboForm password manager and a bit of luck, researchers were able to unearth the password to a crypto wallet containing a fortune. wired.trib.al/JoIr4nN

This was a super fun project and a reminder about the lasting effects of security problems long after they're patched. youtube.com/watch?v=o5IySp…

My latest for @wired. How researchers hacked time to crack an 11-year-old password protecting $3 million in cryptocurrency. They found a significant flaw in RoboForm's password manager that made its pseudo-random-number generator not so random wired.com/story/roboform…

The flaw allowed famed hardware hacker Joe Grand to turn back time and cause the RoboForm password manager to believe it was 2013 and spit out the same passwords it generated a decade ago. RoboForm Password Manager fixed the flaw in 2015, but it appears it never told customers about it...

Joe Grand RoboForm Password Manager This means that if any of RoboForm's current 6 million users are using passwords generated by the RoboForm Password Manager password manager prior to 2015, before the company silently fixed the flaw, they may have passwords that can be cracked in the same way.

The RoboForm Password Manager password regeneration source code and technical notes are up! grandideastudio.com/portfolio/secu…

Spotted a relevant (and timely) t-shirt at hardwear.io #hw_ioUSA2024 ⏳

Hell yeah! No Starch Press officially announcing Travis Goodspeed ‘s Microelectronics Exploits! Go get yer pre-release order in! Super proud of Travis and thrilled to be a small part of his project.

Interested in hacking, discovering, and sharing hardware? Check out the exciting schedule for #Teardown2024 in #Portland Friday, June 21, through Sunday, June 23: crowdsupply.com/teardown/portl… #PDX #HardwareHacking Crowd Supply Helen Leigh ⚡

Shot Through the Heart: An Introduction to Fault Injection (Crowd Supply #Teardown2024) slides are up! grandideastudio.com/portfolio/secu…

In Europe? Want to hack hardware? I'll be teaching my Hardware Hacking Basics + Bonus Day class at hardwear.io in the Netherlands! hardwear.io/netherlands-20…

Here's a new tech #podcast episode. Follow here... The Mixed Blessing of Lousy PRNG (Security Now #980) ift.tt/yzHfoMQ

Joe and Bruno's Guide to Hacking Time: Regenerating Passwords from @RoboForm's Password Generator @ Friday, 2:30pm! ⏰ defcon.org/html/defcon-32…

Might make a cameo at Mar (@[email protected])'s Making the DEF CON 32 Badge @ Friday, 4pm! 🧑‍🔧 defcon.org/html/defcon-32…

💪 Harness your curiosity for hardware hacking with Joe Grand at #hw_ioNL2024 🔺Product teardown 🔺Circuit board reverse engineering 🔺Memory extraction ...and more. Training Objective: hardwear.io/netherlands-20… #hardwarehacking #reverseengineering

About to check out this thing called DEF CON.

I created defrom.lol which make's it easier for #DEFCON32 attendees to flash their badge with custom GB ROMs, as well as provide a way to revert to original firmware. We also have a patched copy of the DEF CON game that is 100% completed with some fun cheats.

Yaaaas! Travis Goodspeed No Starch Press