Are there any open-source hardware/software ESP clones. Similar to what Arduino did in the micro-controller space?
ESP32/ESP8266 Wi-Fi Attacks
61–70 of 152 posts
Re: ESP32/ESP8266 Wi-Fi Attacks
#62Earlier quoted context omitted.
Realtek has the RTL8710, which is a lot like the ESP8266 but with an ARM Cortex-M3 (while Espressif uses the rather obscure Xtensa architecture), which has the advantage of getting an LLVM toolchain for it, which means you can program it in Rust (while the ESPs are mostly limited to C). The real advantage of the ESP8266 however is its raw popularity. It has an Arduino environment, tons of ready to run sketches, Basic…
Realtek has the RTL8710, which is a lot like the ESP8266 but with an ARM Cortex-M3 (while Espressif uses the rather obscure Xtensa architecture), which has the advantage of getting an LLVM toolchain for it, which means you can program it in Rust (while the ESPs are mostly limited to C). Any recommendations for good, affordable dev boards (say under 20Euro/USD), that are easily available? (I have been playing with Rob…
I haven't tried it, but https://www.seeedstudio.com/RTL8710AF-WiFi-Board-p-2805.html looks like it might be what you're asking about.
Re: ESP32/ESP8266 Wi-Fi Attacks
#63Well that sucks. I have probably 20 esp8266 chips around the house doing various things (when you can get an MCU for like $2, you find a lot more uses!), but I don't think any of them really need to worry about this aside from the DoS attacks taking them offline. I'll need to maybe look into some alerts when they start going offline, but not much. I'm not familiar with the Enterprise WPA2 stuff. Is it widely used in…
I don't have any experience with Enterprise Wifi, but according to the article: > This practically means that unpatched ESP devices are more secure by actually using just WPA2 Personal. This is good for all of us DIY'ers that are only using Personal WPA2 - the worst we're exposed to is targeted DOS attacks.
Wonder if WeWork is on WPA2 Enterprise? Although they probably have Broadcom chipsets doing the work.
Re: ESP32/ESP8266 Wi-Fi Attacks
#64Earlier quoted context omitted.
I'd say Espressif has a near monopoly due to first comer advantage. There are way, way more moneyed companies in the wifi MCU game, but I have not seen a single competitor chip outside sales demos yet. Redpine had big dotcoms backing, but it seems that even they dropped the ball on them in favour of Chinese chipmakers. Amazon and Google recently reached out for MXCHIP and Espressif, and their Redpine based solutions…
>I'd say Espressif has a near monopoly due to first comer advantage. No. Espressif is used because it is _cheap_ and has relatively good support libraries. Just the chips/modules from other vendors are usually 15 to 20€ in single quantities while you can get an ESP8266 minimum development board (almost all normal arduino boards are minimum development boards) for like 3€. Unless other vendors reach that same level, t…
First comer advantage is huge.
I work with a mid sized engineering consultancy.
We began switching to ESP as our primary platform just around 2 years ago, just as wifi gadgets were starting to boom.
To date, we got 500 megs of MCU project in our repo. Though most of code is repetitive, there is no chance we will part with such a huge codebase.
Being able to complete a $200k project in a few weeks through code reuse, instead of few months is huge, and imagine how it is for bigger companies with own hardware. No chance anybody switching now.
Re: ESP32/ESP8266 Wi-Fi Attacks
#65Earlier quoted context omitted.
Plus they are a Shanghai-based company and can be compelled by the Chinese government to place hardware back doors. (They are great for makers though, very affordable, lots of features.)
hahaha, this is not a backdoor. It's just logical implementation flaws. If wifi products had good certification, this things wouldn't happen.
Parent didn't say this was a backdoor; just that they "can be compelled" to add one, if requested by the Chinese government in the future.
Sadly this isn't a tin foil hat possibility.
Re: ESP32/ESP8266 Wi-Fi Attacks
#66This is interesting for screwing up badges at Defcon, but I wouldn't lose too much sleep over it. They're neat devices but not really used for anything critical. I'm also not sure they're being used for a lot of consumer devices. If you war drived a major hackerspace you might reset an led light art project.
The “Joule” immersion circulator uses an ESP8266. (I discovered this while looking at the firmware update files.)
Re: ESP32/ESP8266 Wi-Fi Attacks
#67Earlier quoted context omitted.
Espressif have not released the sources of the WiFi implementation, just binaries. I would define that as "security through obscurity".
"avoiding patent infringement lawsuits via opacity"
Has there been any successful patent infringement lawsuits over the last three years that targets a Chinese company that has infringed upon a US company? Isn't that part of the issue in the current trade deal talks with China?
Re: ESP32/ESP8266 Wi-Fi Attacks
#68Earlier quoted context omitted.
Plus they are a Shanghai-based company and can be compelled by the Chinese government to place hardware back doors. (They are great for makers though, very affordable, lots of features.)
Every hardware manufacturer can be instructed/bribed/forced to add backdoors to their hardware by their own government, hence the necessary push for open drivers/firmware (Broadcom itself, just to name one, has had strong ties with the US govt for a long time). I can imagine a meeting in which some high rank officer says "Here's our backdoor blob, you merge this to all your chipsets firmware, so when necessary we can…
> Every hardware manufacturer can be instructed/bribed/forced to add backdoors to their hardware by their own government, hence the necessary
This is false. In most western countries governments cant force HW makers to add backdoor.
Re: ESP32/ESP8266 Wi-Fi Attacks
#69First and foremost, this speaks to the ubiquity and hacker friendliness of Espressif's chips. Most of their competitors (I'm looking at you, Broadcom), prefer security through obscurity and make it extremely difficult to get access to chips, let alone SDKs. I am certain that similar vulnerability exist in every embedded WiFi chipset out there. That being said, the status quo is completely untenable. Connectivity has…
Espressif have not released the sources of the WiFi implementation, just binaries. I would define that as "security through obscurity".
While it is true that the core WiFi code is not open source, the ESP-IDF is significantly more open than anything else on the market today.
This is not to say that Espressif is the bee's knees. I personally wouldn't use their hardware in production. But by making their product easily accessible, and much of the source code open, they have made it easier for white hats to raise security issues.
Re: ESP32/ESP8266 Wi-Fi Attacks
#70Honestly most of the IOT consumer tech infrastructure does security via the "please don't look at me" approach.
Still don't know exactly why my home assistant can discover & control my wifi bulbs...never provided passwords or anything.