Battery Firmware Hacking

Explore battery firmware hacking techniques in this 54-minute conference talk by Charlie Miller. Delve into potential battery attacks, data flash signatures, and the Smart Battery System (SBS). Learn about full access, configuration, and boot ROM modes. Examine the software aspects, including 3-byte alignment, instruction sets, and reversing checksums. Discover how to disable checksums and implement firmware changes. Investigate SMBus MITM attacks and methods for targeting the OS kernel. Gain insights into the challenges of soldering and the intricacies of battery firmware manipulation.

Intro
Spoiler
Possible Battery Attacks
Data flash signature
Smart Battery System (SBS)
Full access mode
Configuration mode
Boot ROM mode
The software
3 byte aligned
The end
Instruction set
Problem 2
Reversing checksum
Disable checksum
Soldering fail
Firmware changes
SMBus MITM
Attacking the OS kernel