red_balloon

Appreciate the (unaffiliated) shout out! No comment on the drive recovery idea...

The fundamentals in the article are all relevant to the hard drive challenge, though the actual multi-step solution to our CTF is rather different.

If hacking hard drives sounds intriguing to you, we're hiring reverse engineers and security researchers! See our whoishiring posts and careers page for details:

- https://news.ycombinator.com/item?id=47977643

- https://redballoonsecurity.com/careers/

Be sure to mention Hacker News if you apply.

Red Balloon Security | Security Researchers, Software Engineers | NYC, Northern Virginia | ONSITE, HYBRID | Full-time, Interns (paid) | US Citizenship Required | https://redballoonsecurity.com

We are a team of expert researchers and engineers focused on securing embedded devices. We work with partners across critical industries, and on government-funded research programs (think DARPA). "Full-stack" for us doesn't just stop at back end code; it means being comfortable with operating systems, firmware, and signals going over the wire. You'll succeed here if you are a quick learner who loves working independently on tough, technical problems nobody has ever solved before.

Day-to-day tasks might include:

* Tearing apart a device in our lab, reverse engineering its firmware, and finding security vulnerabilities

* Developing an automated, robotic platform for hardware reverse engineering (custom hardware, vision models, user interfaces, etc.)

* Hooking and patching RTOS kernel functions to execute defensive device integrity validation code, without violating real-time requirements

* Building scalable servers for processing millions of device telemetry messages across thousands of concurrent connections

* Maintaining open-source reverse engineering tools (like OFRAK https://ofrak.com) and cooking up fun demos for hacker conferences (like this web game we built for DEF CON in 2023 https://ofrak.com/tetris/)

Our main office is in Manhattan, but we are building out a new office in Northern Virginia. US citizenship required. Bonus points if you have an active security clearance, or are willing to get one.

Be sure to mention Hacker News in your application.

https://redballoonsecurity.com/careers/

Red Balloon Security | Security Researchers, Software Engineers | NYC, Northern Virginia | ONSITE, HYBRID | Full-time, Interns (paid) | US Citizenship Required | https://redballoonsecurity.com

We are a team of expert researchers and engineers focused on securing embedded devices. We work with partners across critical industries, and on government-funded research programs (think DARPA). "Full-stack" for us doesn't just stop at back end code; it means being comfortable with operating systems, firmware, and signals going over the wire. You'll succeed here if you are a quick learner who loves working independently on tough, technical problems nobody has ever solved before.

Day-to-day tasks might include:

* Tearing apart a device in our lab, reverse engineering its firmware, and finding security vulnerabilities

* Developing an automated, robotic platform for hardware reverse engineering (custom hardware, vision models, user interfaces, etc.)

* Hooking and patching RTOS kernel functions to execute defensive device integrity validation code, without violating real-time requirements

* Building scalable servers for processing millions of device telemetry messages across thousands of concurrent connections

* Maintaining open-source reverse engineering tools (like OFRAK https://ofrak.com) and cooking up fun demos for hacker conferences (like this web game we built for DEF CON in 2023 https://ofrak.com/tetris/)

Our main office is in Manhattan, but we are building out a new office in Northern Virginia. US citizenship required. Bonus points if you have an active security clearance, or are willing to get one.

https://www.linkedin.com/jobs/view/4367488549