GoKawiil
Tech News
A security researcher built a custom laser fault injection platform to attack the RP2350 microcontroller, targeting Raspberry Pi's DEFCON 2024 Hacking Challenge. Using a single laser-induced fault, the researcher reportedly bypassed the chip's Secure Boot protections and extracted secret data stored in its OTP memory, then submitted the findings to Raspberry Pi.
Security researchers demonstrated that Raspberry Pi's RP2350 microcontroller (revision A4) can have its permanently disabled Secure debug re-enabled through photon-emission microscopy combined with SWD-guided laser fault injection. By pinpointing the exact register controlling debug enablement and firing precisely targeted laser pulses, the team flipped two bits to restore debugger access to the chip's Secure world, later extracting a protected secret from one-time-programmable memory after a rescue reset bypassed the runtime lock.