Poking the S in SD cards

Presented at DEF CON 27 (2019), Aug. 9, 2019, 4:30 p.m. (20 minutes).

Ever wonder why the S in SD cards stands for Secure? Well, it turns out that it is possible to read and/or write protect these cards by software using specific commands. As you might expect, this process isn't as "secure" as the name implies leading to multiple issues. This talk will present some of these features and the vulnerabilities discovered while poking at cards from various manufacturers. The equipment used in this talk is quite easily attainable allowing for easy replication and learning about these attacks.

Presenters:

• Nicolas Oberli - Cybersecurity Expert, Kudelski security
  Nicolas works as a security researcher for Kudelski Security in Switzerland. His research focuses on embedded devices and communication protocols. In his spare time, he now spends more time designing CTF challenges than solving them. He is also one of the main developers of the Hydrabus hardware hacking tool and part of the BlackAlps security conference committee. Twitter: @Baldanos

Links:

• https://defcon.org/html/defcon-27/dc-27-speakers.html#Oberli
• https://infocon.org/cons/DEF CON/DEF CON 27/DEF CON 27 video and slides/DEF CON 27 - Nicolas Oberli - Poking the S in SD cards.mp4
• https://infocon.org/cons/DEF CON/DEF CON 27/DEF CON 27 video and slides/DEF CON 27 - Nicolas Oberli - Poking the S in SD cards.srt (subtitles)
• https://www.youtube.com/watch?v=TlLdqqVa4eI

Similar Presentations:

• Black Hat USA 2013 / Rooting SIM Cards
• DEF CON 12 (2004) / Smart Card Security: From GSM to Parking Meters
• ShmooCon IX (2013) / Forensics - ExFat Bastardized for Cameras