// hi, i'm jessie (snipesy)
I reverse engineer cars, phones, and everything in between.
Latest
10 Surreal Years and an Important Announcement
After 10 years, Snipesy is stepping down from Project Gretio. Eva Valentine (aka Stef) now leads Gretio under its new company, Gretio LLC, at gretioapp.com.
Infineon EMI Power Side Channels
I tried to pull an AES-CMAC key out of a TC3xx HSM over the air. I didn't get it. Here's the setup, what did leak, and 207 GB of traces so you can try :)
New Site, New Look!
Now with Open Source!
What is Not Malware?
The Troubles of Modern Android APK Forensics Those of you familiar with me know I have done quite a bit of work in modern Android forensics, malware or otherwise. The quick TLDR for those of you in the back is the landscape of Android has changed (quite awhile ago actually). Historically (like...
Rooting the Cadillac Part 2: SecOc
Several months ago I mentioned much of Global B is neither encrypted nor signed. This is 'mostly' true, especially on CAN5, but its not as bad as you think. Since our goal is actually being able to repair the vehicle we own, being able to actually place a module on the vehicle that can cooperate...
Rooting the Cadillac Part 1: Lay of the Land
Disclaimer: All actions performed here were performed in an enclosed safe environment by professionals with 10+ years in automotive pentesting experience. Attempting any of this yourself will likely cause irreparable hardware damage. Don't try any of this. Anyway, just enjoy the show. Most reading...
Maybe you should decline OTAs?
featured image from BMW USA in car advertisements Let's talk about Why. If you have not read The ABCs of Global B yet I highly recommend starting there. Tuning modern vehicles is tricky as modules will only accept calibrations signed by GM. They usually won't even allow you to enter a programming...
The ABCs of Global B
At Surreal Development we created Gretio for Global B (successfully) with 0 prior knowledge. The only information you can find about Global B on the internet is conjecture but nothing definitive. We want to change that, and so we are pleased to create what might be the first definitive 100% public...
SurrealDev Future Plans
Hello Surreal Dev Followers and Gretio users, This will be a more informal post than is usual. Due to my expertise in Android, Reverse Engineering, and software development in general I ended up taking a regular old job as a Reverse Engineer with Trellix (previously known as McAfee) in 2022. I now...
eXtremely Demoralizing
Since the pandemic, remote software engineering work has become common place. Daily stand ups around cubicles are now sit downs with tiny glowing boxes representing people. Agile and scrum have both adapted reasonably well to remote work, and the future of software dev is likely going to be...
