Nullcon Berlin 2024 | Fault Injection And The Supply Chain - Nolen Johnson and Jan Altensen

This talk explores the critical intersection of fault injection techniques and supply chain vulnerabilities, highlighting a currently underrecognized threat to both consumer and enterprise devices. The speaker focuses on the Chromecast with Google TV, demonstrating how attackers can exploit eMMC vulnerabilities through fault injection to introduce malware into the supply chain without detection. By investigating eMMC fault injection, privilege escalation, and persistence methods, this research sheds light on the emerging security risks associated with the manufacturing and distribution of widely adopted consumer electronics.