Hardwear.io USA 2026
2026-05-29..2026-05-30
Santa Clara, United States
[hardwear.io USA 2019, Hardwear.io USA 2023, Hardwear.io USA 2024, Hardwear.io USA 2026]
as the organisers put it
Hardwear.io USA 2026 featured top hardware security training, innovation, and connections. Relive the moments and gear up for Netherlands 2026!
| title | author | length |
|---|---|---|
| Exploiting Keyspace Reduction And Relay Attacks In 3Des And Aes Protected NFC Tags | Nathan Nye, Philippe Teuwen | 41m |
Demonstrates practical attacks that combine relay over sub-gigahertz, partial key overwrite and EEPROM tearing to reduce 3DES/AES key entropy on MIFARE… | ||
| The IoT Longevity Crisis: Managing Obsolete Security and "Cloud Slop" | Yossi Oren | 11m |
Argues that hardware lasts decades while vendor software and security decay within years, illustrated by a smart fridge whose clock is frozen at 2017 and still… | ||
| The Automation of Exploits: Will Eatherton on AI-Driven Security and the End of Obscurity | Will Eatherton | 13m |
Claims that LLMs now chain firmware, board schematics, FPGA designs and embedded code into reproducible attacks and Cisco experiments show concrete results: an… | ||
| The "Last Mile" of Security: Roman Korkikikan on Hacking TPMs with Budget Hardware | Roman Korkikikan | 07m |
Demonstrates a successful attack on a TPM of an edge server using power analysis and voltage injection, built with a custom sensing board plus used… | ||
| The DIY Frontier of Autonomous Driving | John McMaster | 03m |
A DIY Comma AI box that you build by intercepting the CAN bus and loading GitHub code drives a real car with a human ready to intervene, successfully… | ||
| Securing the Quantum Future: Exploiting Crosstalk and Controller Vulnerabilities | Jakub Szefer | 11m |
Experiments run on IBM and other vendor machines demonstrate exploitable physical imperfections: crosstalk between qubits lets a nearby circuit alter a… | ||
| Industrial Security and Environmental Resilience: A Conversation | James DeLuccia | 07m |
Oversees security for about 1,000 products per year across industrial sensors, life‑safety systems, mobile apps and building platforms and explains many… | ||
| Bridging the Gap: The Convergence of Hardware and Software Security | Connie Mathison | 03m |
Argues that software must be scanned on the device because vulnerabilities only reveal themselves when running on hardware, and teams struggle to convince… | ||
| Open-Source Hardware Security: From Lab Experiments to Commercial Reality | John McMaster | 04m |
Chromebooks ship with a hard silicon implementation of the OpenTitan secure element and some servers include the embedded OpenTitan; Trezor integrates a Tropic… | ||
| The Asymmetry of AI Security and Physical Hardware Resilience | Lionel Riviere | 05m |
Claim: AI currently gives attackers a practical advantage by AI-generated exploit code that rapidly expands attack surface and finds bugs faster, while… | ||
| Ethical Hacking for All Ages: Hardware Hacking with Script Kitty | Wolfgang Beck, Kody Kinsey | 06m |
Hands‑on project lineup features a solderable Meow Mixer badge that teaches through‑hole and surface soldering and sells well to adults; a USB scripting device… | ||
| From Digital Forensics to Hardware Reverse Engineering: A Conversation | Mathew Domanic | 06m |
Three-day embedded and shredded course teaches how to identify board components, map schematics and perform firmware and memory acquisition using debugging… | ||
| From Paperclips to CVEs: Ethan Morchy on Lockpicking and Medical Device Security | Ethan Morchy | 05m |
Won the lockpicking contest by a single clear win after years of daily 10–15 minute practice and shows a re-pinning kit prize and experience with Master… | ||
| Mandating Security: Sultan Qasim Kahn on the Vulnerabilities of Bluetooth Channel Sounding | Sultan Qasim Kahn | 05m |
Bluetooth channel sounding implementations generate valid low‑level security metadata but then drop it above HCI, creating a simple exploit path where… | ||
| The Intersection of Neuroscience, AI, and Hardware: A Conversation | Kalaina Andrese | 04m |
A neuroscience undergrad turned developer describes building an oncologist-tailored LLM that ingests the NCCN guidelines to surface standard-of-care steps for… | ||
| The Road to Red Teaming: Bypassing Motorcycle Security | Scott Sheahan | 06m |
Research demonstrates a working hardware implant that physically isolates the immobilizer and lets the motorcycle start, bypassing both tactile protections and… | ||
| Bridging the Glitch Gap: Hash Salehi on Making Professional Fault Injection Accessible | Hash Salehi | 04m |
Built an affordable front-end board that lets a Pico EMP plus a cheap eBay power supply deliver higher voltage pulses and faster recovery times so hobbyists… | ||
| Unmasking the Black Box: Eduardo Montovani on Wi-Fi Security, AI, and Affordable Hacking | Eduardo Montovani | 13m |
Focuses on practical Wi‑Fi security: a homemade web interface controls a Wi‑Fi USB dongle from China to set monitor mode, send and receive frames and sniff… | ||
| Beyond the Hype: Guanxing on Exploiting Crypto Phones and the Evolution of Security Research | Guanxing | 13m |
A USB-based exploit targets an Ethereum wallet phone and achieves key extraction because the vendor stores keys in the clear rather than isolating them in an… | ||
| Your Mediatek Wi Fi Chip's Secrets Bypassing Firmware Encryption | Edoardo Mantovani | 40m |
Complete defeat of MediaTek Wi‑Fi firmware: kernel reg_index/reg_val read/write primitives and radare2 support for NDS32 enable dumping and reverse… | ||
| The F In Iot Stands For Future Proofing | Yossi Oren | 38m |
Claims that IoT must stay secure for as long as devices remain useful because of a success–popularity mismatch where companies die but devices persist, shows… | ||
| Reverse Engineering A Ledger Nano X Hardware Implant | Joe Grand | 46m |
A secondhand Ledger Nano X contains a hidden green PCB with wires and an antenna that taps the SPI link between the secure element and display, captures the… | ||
| Silicon Under Attack Physical Exploitation Of Modern Chips | Joe Grand, Lionel Riviere, Domenic Forte, Dan Grosu | 44m |
Live fault injection succeeds across three cost tiers: a $100–$1,000 ChipWhisperer bench that achieves exploitable glitches, a mid‑tier EMFI setup using a chip… | ||
| Hardware At The Edge Reliability, Ai Infrastructure And Defensive Design | Will Eatherton | 37m |
Argues that observability is the most underweighted defensive pillar, cites 66% of Meta training job interruptions are hardware failures, and warns silent data… | ||
| Hacking 5G From Radio Security To The Apis | Sébastien Dudek | 33m |
Live networks still accept null ciphers accepted and ship with encryption or integrity protection disabled on signaling and user plane, enabling interception… | ||
| Glitching Edge Ai Fault Injection On Npus, Automated By LLM Agents | Jasper van Woudenberg, Rajesh Velegalati | 32m |
Voltage glitching on a commercial Rockchip NPU corrupts object detection — hallucinations, phantom boxes and manipulated confidence scores occur without… | ||
| Breaking The Root Of Trust Practical Side Channel Key Extraction From A TPM | Roman Korkikian | 29m |
Edge TPMs on shipped servers leak secrets: $2,000 power side‑channel setup plus a decades‑old oscilloscope and Raspberry Pi records power and SPI traces… | ||
| When Hardware Gets Pwned Mechanics Of Detection, Response And Recovery | Marcus Richerson, James DeLuccia, Aaron Guzman | 49m |
A firmware implant hides in an enterprise switch, deployed to 200 branch offices, survives factory reset and stays dormant until a researcher finds UART/JTAG… | ||
| Security Analysis Of Bluetooth Channel Sounding Protocol And Implementations | Sultan Qasim Khan | 40m |
Bluetooth Channel Sounding uses packet and multicarrier phase ranging but leaves combination and defenses optional, enabling attacks that shift perceived… | ||
| Out Of The Box Exploitation Breaking The Trust Chain Of The Ethereum Phone | Guanxing Wen | 36m |
Starts from an unenforced MediaTek download-mode auth and uses a Loader-of-the-Loader in-memory patching chain to reach EL3, install HVC/SMC backdoors in… | ||
| Mobilized Immobilizer - Bypassing Motorcycle Security 1 | Scott Sheahan | 42m |
Reverse engineers a 2025 Indian Scout Bobber to extract CAN traffic with a Kvaser and CAN Pico, finds two nested challenge‑response exchanges that reduce to… | ||
| Cross Talk Vulnerabilities In Cloud Based Quantum Computers | Jakub Szefer | 37m |
Experimental results on real IBM quantum machines show co-located circuits cause measurable interference: running dense two‑qubit CNOT flood patterns on… | ||
| nothing matches | ||