Tarlogic detects a hidden feature in the mass-market ESP32 chip that could infect millions of IoT devices
www.tarlogic.com
Tarlogic presents research revealing undocumented commands in the ESP32 microchip, present in millions of smart devices with Bluetooth
Source Link Privacy.

Privacy test result

https://themarkup.org/blacklight?url=https%3A%2F%2Fwww.tarlogic.com%2Fnews%2Fbackdoor-esp32-chip-infect-ot-devices%2F&device=mobile&location=us-ca&force=false

Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices. Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls.

Update: The ESP32 “backdoor” that wasn’t.

  • Rexios@lemm.eeEnglish
    322·
    22 hours ago

    Please update the title of this post to mention the update

      • Rexios@lemm.eeEnglish
        268·
        21 hours ago

        Idk maybe specify that it was determined to not be a backdoor. Right now it reads as anti-china fear mongering.

        • fuamerikkka@lemm.eeEnglish
          3·
          2 hours ago

          Thank you, I keep getting down voted because I said the same, but obviously other get it. Appreciate you and the sanity check!

        • Oisteink@feddit.nlEnglish
          83·
          20 hours ago

          Could be propaganda as well - why not scare the monkeys with the bad Chinese? Without ESPs the market is so much easier to control.

          Note:I use both the ES8266ex and different ESP32s in my projects.