4

Chinese have decided to ripoff a PIC product I make. Switching to ARM for other reasons anyhow, mainly that Microchip is a joke, either STM32 or NXP LPC, exact chip is open still.

There are sites that claim to have vulnerabilities for various Cortex chips.

  • As I understand it, there could be a decapping process where the die is exposed and messed with
  • There could be a JTAG/SWD hack with a special process or over/under voltage exploit, I don't know this exists for ARM, but I know it's possible on other chip (F U PIC)
  • There is also a non-removable bootloader on almost all consumer ARM Cortex parts. I think STM32 is a USB and serial bootloader. NXP or Freescale or someone have a full Mass Storage Class bootloader. Since the code is kept hidden, there could be an undisclosed exploit there too.

Is there anything I can do to keep my code secure? Almost no one in my industry would have any idea what to do even if I handed them the C code. It's Chinese knock-offs / clones I need to worry about since they are using our name, logos, cloned hardware, my code, and undercutting official dealers.

  • The plan I have currently is to require online authentication. So that if I see a chip that isn't on my masterlist, I burn it with bad firmware. If I see a duplicated chip I verify the original and burn the clones. If the chip is valid, I like it to the user's info and move along. The legit user should see nothing but an interface for their product.

With the above idea, some one ripping us off would still get the ROM so I still have the encryption keys in the wind. While the module wouldn't really work without using it online as the interface, it's still annoying and a potential issue.

One consideration is the Chinese haven't been willing or really likely able to replicate the code without 1:1 ripping it. So I sort of think it's a leap to assume they'd rip my code, then go to reverse engineering, because that just doesn't seem like the same class of criminal that's cloning our stuff. I think they attacked us because it's such simple PCB and the code was easy to get. They likely aren't going to also reverse all the online work to make an offline interface for it, I don't think anyhow.

Thoughts on anything else I could do?

Improve this question
3
  • Have you considered TrustZone for ARM chips?
    – ThoriumBR
    Sep 9, 2015 at 19:53
  • TrustZone as I understand it does not apply to Cortex-M chips. Nor does it seem to apply to decapping / protection-defeat methods. I could be mistaken, but my impression of TrustZone was it's a hypervisor system in place for systems where the user will run their own code, like on A-series chips that go in phones. For the most part... What I'm gathering from my research is that whatever keys I put in place, could be eventually read out by some method. I am uncertain if the entire bootloader I make could be read as well. Leaving me where I am now, vulnerable to offline Chinese clones.
    – mint branch conditioner
    Sep 10, 2015 at 17:54
  • I SHOULD NOTE: That each ARM chip seems to come with a 96-128bit unique serial ID. My plan as been to capture this ID at manufacturing and compare that to when a user plugs one in and logs in with it.... I wrote that above but failed to mention the Unique Serial ID aspect of it.
    – mint branch conditioner
    Sep 10, 2015 at 17:56

1 Answer 1

Reset to default
3

"Burning chips with bad firmware." This can result in extremely serious consequences that might even jeopardize lives.

There is definition for this type of activity. It is called sabotage and can have very serious legal consequences.

You are essentially running a cyber attack on hardware by maliciously inserting corrupted firmware with the sole purpose of bricking the device.

This is a technique used by black hats to cause irreparable damage to targets they attack. There is a chance that you will be treated as a criminal and wind up doing jail time. You can also be sued in court for countless amounts in damages.

I would not advise this unless you want to open a colossal can of worms. People understand the need to protect IP but this type of sabotage not only crosses the line but literally jumps over it. It moves from the realm of simply protecting IP and into the realm of malice.

You seriously need to consider a different way to go about this issue without causing destruction to hardware.

Improve this answer
12
  • 1
    "There's a chance" - That is - if they get who you are, and that you are doing this, you will face criminal charges. This situation hapenned very closely to what OP described here in Brazil - a Mechanic was sabotaging cars he was supposedly to fix because they were not using the system that someone related to he developed. He was sentenced to 25 years and had to pay a huge fine (or did not pay, I don't really know. This case is old.)
    – Malavos
    Sep 16, 2015 at 16:40
  • 1
    Exactly my point. If the hardware you manufacture was used by a government and you sabotaged it because of counterfeit chips, you would be looking at multiple criminal charges and spending a very very long time in prison.
    – WAR10CK
    Sep 16, 2015 at 16:58
  • 2
    Have your heard of the FTDIgate scandal? Your little burning tactic is almost exactly like this: youtube.com/… Do you really want to be the next FTDIgate?
    – WAR10CK
    Sep 19, 2015 at 15:38
  • 1
    Ok let's take this to another level: Say I manufacture a device that requires the same scheme you are using, and if the device that connects to my servers is an illegal clone then my server sends a command to cause the device to burst into flames, I guess that means I would not be held to any legal accountability because they connected to my site and their illegal clone detonated in their face. I just got away with harming someone and possibly killing them. So this means I can cause all sorts of mayhem and say it was their fault. Two wrongs DO make right now apparently.
    – WAR10CK
    Oct 2, 2015 at 0:16
  • 1
    But Microsoft does not brick hacked XBoxes, they simply refuse to provide them with service. If your solution simply refused to give updates to clones, it would be perfectly legal, but actually damaging property which you do not own is illegal. Yes, you own the copyright, but you do not own the actual devices. Intentionally causing physical damage to physical devices you do not own is a felony, and you can easily be sued for a huge amount if these destroyed devices result in lost income for a company or actual injury to an individual, whether intentionally or due to a false positive.
    – forest
    Dec 10, 2017 at 7:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .