1 comment

[ 3.7 ms ] story [ 13.6 ms ] thread
I don't quite understand why the author considers the ESP 32 a "broken platform" now that this attack was possible.

Doesn't it definitely require physical access? If so, couldn't you just swap the whole device for a malicious one? Is the issue that you can read out secret keys burned into the firmware?