138 stories tagged reverse-engineering, newest first.
106 points by taubek | 38 comments
X post by Freddy Vega claiming Samsung TVs detect Bluetooth microphones, classify sounds like dog barks and baby cries, and send telemetry including app usage.
272 points by mashally | 176 comments
An X post reporting that Samsung Tizen TVs run an INT8 AlexNet TensorFlow Lite model on 960x540 screen captures every few seconds to identify which game is being played.
40 points by Velocifyer | 8 comments
Codeberg repository for FindMyWeb, an open-source web app and Zephyr-based firmware for building your own trackers on Apple's Find My network.
830 points by testing22321 | 617 comments
Reddit post in r/antiai about a hacker reverse engineering a Samsung TV and finding on-board AI listening; page shows a Reddit network-security block.
89 points by motionlessveloc | 40 comments
A technical write-up reverse-engineering Block Blast's server-delivered traits, showing a rule that forces an unplaceable piece set when a high-value rewarded ad is ready.
45 points by ibobev | 33 comments
A 2003 ACM Queue article by Peter and George Phillips on emulating or translating legacy binaries, such as arcade game ROMs, when source code is unavailable.
59 points by ibobev | 18 comments
A blog post examining cut and disabled rendering features in Sonic 06, such as shader variants, shadow maps, point lights and reflections, found while building Marathon Recompiled.
40 points by syx | 4 comments
Blog post reverse engineering the Beyblade X Beybattle Pass launch tracker, decoding its Bluetooth LE payloads for launch RPM, counters and high scores.
64 points by mimasama | 39 comments
ReC98 blog post detailing splitting Shuusou Gyoku's game logic into a library and a replay validation CLI, ending with the developer's retirement announcement.
74 points by wuemeli | 33 comments
Blog post describing reverse engineering the Hitster board game's Android app to decrypt its card-to-song database, which turned out to be publicly available unencrypted.
33 points by userbinator | 5 comments
OS/2 Museum blog post on fixing a ThinkPad 750C I9990303 error by patching IBM's BIOS flash utility to bypass power management checks and reflash corrupted firmware.
102 points by pwg | 33 comments
Ken Shirriff blog post examining the Intel 8087 coprocessor's microcode and circuitry for floating-point addition and subtraction, including special cases.
75 points by michidk | 5 comments
A blog post on reverse engineering the firmware of a Eufy HomeBase 2 device, covering WiFi secrets, UART lockdowns, and recovering data from a damaged flash chip.
393 points by speckx | 181 comments
Blog post about finding malware disguised as South Park episodes on torrent sites that ended up in the author's Sonarr download queue, and reverse-engineering it.
224 points by ErenayDev | 198 comments
Blog post by Christian F.K. Schaller, a Red Hat developer, about using AI tools to reverse engineer hardware, presumably for Linux driver development.
64 points by popcar2 | 54 comments
A personal blog post arguing that AI tools are enabling mass decompilation of video games, which the author sees as both exciting and worrying.
70 points by taytus | 24 comments
GitHub repository for rea, a tool for reverse engineering apps and native binaries using AI agents.
112 points by epestr | 35 comments
A blog post describing how the author reverse engineered a commercial spatial audio effect to recreate it as a simple real-time audio processor for Linux using PipeWire.
186 points by davikr | 136 comments
Blog post by Maurice Heumann describing using AI agents, consuming over 500 billion tokens, to decompile a first-person shooter game.
716 points by modinfo | 308 comments
Landing page for REA, a tool that gives AI coding agents capabilities to reverse engineer and explain how programs work, with setup instructions.
78 points by speckx | 15 comments
Blog post describing how the author got childhood Macromedia Director games running on modern hardware by working around old copy-protection mechanisms.
22 points by anupray | 7 comments
GitHub repository for a project that reverse-engineered a Nokia 110 4G's firmware to add a chat-based AI agent that handles calls, alarms and other native functions.
54 points by 0bytes | 33 comments
GitHub repository documenting reverse engineering of the M-VAVE FM-1 pocket synthesizer firmware, with analysis, docs, and firmware images.
295 points by Fe2O3 | 247 comments
GitHub repository for AnyPS5, a tool that automatically ports PS5 executables to run natively on Linux and Windows without emulation.
249 points by signa11 | 168 comments
A blog post detailing how the author first booted Linux on an Apple M4 Mac mini, building on Asahi Linux work.
6 points by zdw | 1 comments
A personal memoir blog post about hacking SimCity 2000 saved game files in the DOS era.
61 points by mogrinz | 23 comments
GitHub repository for an MIT-licensed Arduino library for working with the AMT630A display controller chip used in cheap backup camera displays.
114 points by keeda | 60 comments
Blog post about reverse engineering and modernising the old war game War of the Lance with AI, and what it suggests about the economic impact of transformers.
98 points by pwg | 11 comments
Ken Shirriff's blog post reverse-engineering the Intel 8087 coprocessor's FPTAN tangent instruction, which combines CORDIC with polynomial approximation.
395 points by vinhnx | 91 comments
Blog post describing reverse engineering the hardware, component communication, and firmware of an Egret GT e-scooter and writing custom Rust firmware for its display.
394 points by anitil | 87 comments
A personal blog post describing how the author solved Jane Street's "Can you reverse engineer an ASIC?" challenge over a month-long effort.
829 points by ComputerGuru | 411 comments
Blog post reverse engineering how Microsoft Paint and Photos embed a server-issued GUID as an invisible pixel watermark in locally generated AI images.
351 points by epestr | 95 comments
GitHub repository for Project Rosenbridge by xoreaxeaxeax, documenting and demonstrating a hardware backdoor found in some x86 CPUs.
2318 points by kirushik | 692 comments
Blog post reporting that inspecting Claude Code revealed hidden system prompt markers that vary based on the API base URL and the user's timezone.
435 points by rbanffy | 154 comments
GitHub repository for LibrePods, an open-source project that enables Apple AirPods features like ear detection and hearing aid mode on Android and Linux.
376 points by librick | 92 comments
Blog post giving a three-year status update on reverse engineering the headunit of a 2021 Honda Civic, including mapping its update process.
650 points by xx_ns | 106 comments
Blog post describing vulnerabilities in the Creative Sound Blaster Katana V2X speaker letting nearby attackers turn it into a spying tool and Rubber Ducky without pairing.
389 points by kageroumado | 94 comments
GitHub repository for Phosphene, an open-source video wallpaper engine for macOS Tahoe built by reverse engineering Apple's WallpaperExtensionKit.
318 points by jandeboevrie | 108 comments
A blog post explaining how to play Space Cadet Pinball, the Windows XP game, on Linux via a reverse-engineered open-source port installable as a Flatpak.
482 points by lmbbuchodi | 339 comments
Blog post analyzing how ChatGPT injects ad units into its conversation stream and how OpenAI's OAIQ merchant tracking SDK closes the attribution loop.
569 points by tobr | 151 comments
Blog post by Alice Pellerin arguing that hex editors should color-code bytes to make binary data easier to read.
346 points by trueduke | 316 comments
GitHub repository for TagTinker, a Flipper Zero app for researching electronic shelf label price tags over infrared, with an Android companion.
413 points by NelsonMinar | 106 comments
Ken Shirriff blog post examining the electromechanical analog Angle Computer used in the B-52 bomber's automated celestial navigation star tracker.
922 points by alberto-m | 596 comments
A blog post reverse-engineering the encrypted Cloudflare program that inspects ChatGPT's React state before allowing users to type.
600 points by amarcheschi | 217 comments
Blog post decompiling the official White House Android app, reporting a cookie/paywall bypass injector, GPS tracking every 4.5 minutes, and remotely loaded JavaScript.
325 points by davikr | 280 comments
A long blog post explaining how modern kernel-level anti-cheat systems like BattlEye operate on Windows, covering kernel callbacks and memory scanning.
359 points by zdw | 104 comments
A Substack post, the first in a series, describing how the author reverse engineered the Apple M4 Neural Engine to bypass CoreML and talk directly to the hardware.
577 points by minimalthinker | 238 comments
Blog post describing how reverse-engineering a Kickstarter smart sleep mask revealed it broadcasts users' EEG brainwave data to an open MQTT broker and accepts stimulation commands.
419 points by handfuloflight | 208 comments
GitHub repository for Ghidra, the NSA's open-source software reverse engineering framework licensed under Apache 2.0.
665 points by benstopics | 225 comments
The origin story page for Wall Street Raider, a 1986 DOS stock market simulation game being remastered for Steam by Ben Ward.
343 points by MrBruh | 144 comments
Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.
793 points by zdw | 251 comments
Dmitry Brant's blog post about reverse engineering and bypassing a decades-old parallel-port copy protection dongle for legacy software.
323 points by sibellavia | 104 comments
Blog post by Simone Margaritelli detailing reverse engineering of the TP-Link Tapo C200 camera, finding hardcoded keys, buffer overflows and privacy issues with AI assistance.
358 points by todsacerdoti | 150 comments
A blog post reverse engineering the aircraft carrier landing sequence in the NES game Top Gun, giving the exact altitude, speed, and alignment requirements.
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.
318 points by Medusalix | 84 comments
GitHub repository for FreeMDU, open hardware and software tools for communicating with Miele appliances via their optical diagnostic interface.
1320 points by moonleay | 407 comments
GitHub repository for LibrePods, an AGPL-licensed project that brings Apple-exclusive AirPods features like battery status and hearing aid mode to Android and Linux.
323 points by jamesbelchamber | 124 comments
A personal blog post by James Belchamber about attempting to reverse-engineer the USB data protocol of his Microlife blood pressure monitor.
357 points by mukti | 127 comments
GitHub repository for NoLongerEvil, custom firmware to revive bricked Google Nest Generation 1 and 2 thermostats after official support ended.
577 points by vinhnx | 137 comments
Blog post describing how the author bypassed British Airways' messaging-only free in-flight WiFi restrictions to get broader internet access.
1633 points by pixelmelt | 493 comments
Blog post describing how the author reverse-engineered and bypassed the DRM on Amazon's Kindle web reader to read purchased books outside the official app.
318 points by nullpt_rs | 42 comments
Blog post from nullpt.rs introducing a custom browser being built for web reverse engineering, deobfuscation, and anti-bot analysis workflows.
522 points by kennedn | 162 comments
A blog post about reverse-engineering a TP-Link Tapo camera bought to monitor a dog, and what the author discovered about TP-Link's systems.
784 points by vuciv | 168 comments
Blog post describing how the author hacked GameCube memory to replace Animal Crossing villager dialogue with text generated live by an LLM.
740 points by alsetmusic | 179 comments
Alyssa Rosenzweig's blog post concluding her series on reverse-engineering the Apple M1 GPU and building open source Linux graphics drivers for Asahi Linux.
334 points by JadedBlueEyes | 144 comments
Blog post describing how the author and a friend reverse engineered a Wi-Fi smart washing machine's API and encryption to build a notification script.
340 points by dsekz | 116 comments
GitHub repository with a Python toolkit that reverse engineers and generates Chrome's private x-browser-validation integrity header.
475 points by BlueFalconHD | 352 comments
GitHub repository containing decrypted safety filter override files for Apple Intelligence generative models, plus Python and LLDB tools used to decrypt them.
374 points by zdw | 109 comments
Blog post by Doug Brown describing his discovery of an undocumented easter egg hidden in the Power Macintosh G3 ROM using Hex Fiend.
457 points by sbt567 | 63 comments
Blog post recounting how the author wrote a basic Linux USB driver for the Nanoleaf Pegboard Desk Dock using protocol docs from Nanoleaf support.
766 points by stgl | 225 comments
Blog post by Stefan Gloor describing how he obtained a root shell on a Yomani credit card payment terminal through hardware hacking.
318 points by lafond | 170 comments
Personal blog post recounting how reverse-engineering Waffle House's website during Hurricane Helene to track the Waffle House Index led to a cease and desist.
329 points by todsacerdoti | 166 comments
A blog post recounting the author's experience reverse engineering Windows Security Center (WSC) while building defendnot, a tool to disable Windows Defender.
1304 points by yett | 282 comments
Blog post by Silent investigating how a 20-year-old latent bug in GTA San Andreas began causing breakage under Windows 11 24H2, tracing the true root cause.
366 points by xfeeefeee | 103 comments
GitHub repository with tools and notes for deobfuscating and decompiling the JavaScript virtual machine TikTok uses in its web client.
337 points by tanelpoder | 64 comments
GitHub repository for GhidraMCP, a Model Context Protocol server that lets LLMs interact with the Ghidra reverse engineering tool.
354 points by Tomte | 138 comments
Ken Shirriff's blog post reverse-engineering the Pentium's ×3 multiplier circuit, used in its base-8 floating-point multiplication, and explaining how it works.
343 points by chc4 | 83 comments
A Zetier blog post arguing that video game speedrunners use the same skills and techniques as security vulnerability researchers.
321 points by xmprt | 50 comments
Blog post by Bryce Bostwick about reverse engineering an iOS app that blocks debuggers, exits on code injection, and crashes jailbroken phones.
437 points by thunderbong | 108 comments
GitHub repository for OpenHaystack, a framework from SEEMOO Lab for tracking personal Bluetooth devices via Apple's Find My network.
484 points by deverton | 191 comments
A blog post detailing reverse engineering research into the user-mode anti-cheat in Call of Duty: Black Ops Cold War.
497 points by pabs3 | 314 comments
A Consumer Action Taskforce wiki guide describing how to reverse engineer Bambu Lab's Electron-based Bambu Connect app, part of its authorization control system coverage.
435 points by smoser | 208 comments
Altay Akkus's Substack post "You wouldn't download an AI," about extracting on-device AI models from mobile apps through reverse engineering.
520 points by AbuAssar | 60 comments
GitHub repository for mitmproxy2swagger, a tool that generates OpenAPI/Swagger specs by reverse-engineering REST APIs from captured traffic or HAR files.
417 points by pvarghav | 97 comments
Landing page for API Parrot, a desktop tool for reverse engineering websites' HTTP APIs to automate, integrate, or scrape sites without public APIs.
![Screenshot of media.ccc.de: We've not been trained for this: life after the Newag DRM disclosure [video]](https://hn.urlbox.com/shots/renders/2024/12/29/7726c93e-094a-4af5-9e8a-ad5b707f0234.jpg)
348 points by doener | 58 comments
Video of a 38C3 talk by Dragon Sector researchers about the aftermath of disclosing DRM in Newag trains, including the lawsuit filed against them.
362 points by gslin | 110 comments
Ken Shirriff's blog post examining the Pentium die to show where the 1994 floating-point division bug lies in the silicon and why it occurred.
![Screenshot of media.ccc.de: Liberating Wi-Fi on the ESP32 [video]](https://hn.urlbox.com/shots/renders/2024/12/28/5a60ada3-d26f-4f9d-8f97-ec92dad9d2f3.jpg)
317 points by doener | 123 comments
Video recording of a 38C3 Chaos Communication Congress talk by Frostie314159 and Jasper Devreker on reverse engineering and liberating the ESP32's Wi-Fi stack.
501 points by hacka22 | 85 comments
CCC statement supporting the three hackers who exposed at 37C3 how Polish train maker Newag manipulated trains to block third-party repairs.
454 points by nkko | 167 comments
GitHub repository for FindMy.py, an MIT-licensed Python library for querying Apple's FindMy network, including AirTags and OpenHaystack devices.