Raytheon’s Tech Night: How to Unlock a Huawei Phone with your Nose

Join Raytheon at Jailbreak Brewing Co. on Tuesday, May 8th, from 5 to 8 p.m., for its May Tech Night.

Nick Stephens, of Raytheon CSI, will demonstrate and explain a bug chain targeting Huawei’s TrustZone architecture. This chain will begin in unprivileged userland as a normal Android app, from there the app will achieve root privileges on the phone. With root, the app will then target ARM’s most-privileged layer, targetting the Trustzone sitting above the kernel. With a combination of bugs discovered by the speaker, the app will gain a foothold in the TrustZone by compromising a trusted app followed by the compromise of the most elevated compartment, the TrustZone kernel. With the privileges of the TrustZone kernel, Nick will demonstrate how the fingerprint sensor can be completely disabled.

Doors open at 5 p.m.; talk beings at 6 p.m.

RSVP: [email protected]