/images/avatar.png

Eric Hsieh

HITCON Badge Reverse Challenge Official Solutions

Language: 中文 | English

Background

When I was originally designing the challenges, I was worried that they might be too difficult. I considered following the approach used by somebody in CSC, gradually releasing the firmware, source code, and other materials over time.

However, I heard that everyone had easily cleared the previous BadUSB challenge. Considering how busy staff are during the conference, and also hearing that the prizes were pretty good, I figured it was fine if the challenges were as difficult as possible (and also because I’m lazy). So I decided not to release the firmware and instead let everyone dump it themselves and solve the challenges with the help of AI. In the end, only two attendees successfully solved one of the challenges 🥺

HITCON Badge 逆向挑戰題解題說明

Language: 中文 | English

背景

原本在構思題目時,擔心題目太難,想說參考某豹在金盾獎的做法,隨著時間依序放出韌體、程式碼等。

但聽說以前的 BadUSB 挑戰大家都輕鬆破關,再考量年會進行時的忙碌程度,還有聽說獎品很好,希望題目盡量難沒關係(以及我懶),所以決定就不放出韌體,讓大家自己靠 dump 出來的加上 AI 來解題。結果只有兩位會眾成功解出題目 🥺

手動更新 Linux Firmware

最近一個禮拜筆電一直偶發當機。當機時 Caps Lock 會動,螢幕不會動,只能強制重開,趁週末修一下。

Framework 13 AI 300 series

journalctl -b 0
kernel: amdgpu 0000:c1:00.0: amdgpu: MES failed to respond to msg=MISC (WAIT_REG_MEM)
kernel: amdgpu 0000:c1:00.0: amdgpu: failed to reg_write_reg_wait
...
kernel: amdgpu 0000:c1:00.0: amdgpu: MES ring buffer is full.

根據錯誤訊息找到類似的

Android OTG 手機對接傳檔案

沒錯,就跟看到的圖一樣,兩隻手機直接用 Type-C 對接就可以傳檔案了!

最近在研究用手機和平板代替帶筆電出門的可行性,再加上有看到別人直接這樣用,所以測試一下到底要怎麼弄。我之前只有偶然成功觸發過,後來又傳不了檔案,所以設定沒調對的話是用不了的。

部落格誕生了!

緣起

在畢業後終於有一小段時間時間是徹底屬於自己的了。打開 trello 想把以前的代辦事項處理掉,看到三年多前記下要寫資安 writeup…

不是,我怎麼可能記得三年前在解什麼題目!