Graham Sutherland / Polynomial on Nostr: I haven't come across it in a while, but the last time I did it was in an embedded ...

I haven't come across it in a while, but the last time I did it was in an embedded device where the bootloader used whitebox aes to decrypt the main firmware image. it was u-boot based but heavily modified, and they obfuscated a lot of the code including regular u-boot stuff, which made it a gigantic pain in the ass.

naturally I absolutely fucking wrecked the device out of spite. definitely top 10 tests in terms of critical findings. so maybe being annoying is actually in the vendor's interest.