Transcript for video (not sure if this is appropriate for here, please advise if not, but I thought it would be useful to read alongside the video)

Chris Tarnovsky

Hired by satellite TV industry

Works independently in a San Diego lab

Remove metal smart card

Expose to acids

Remove white epoxy

Plastic breaks down after 10 minutes

Acetone in two beakers

Fuming nitric acid HNO3 applied to chip

Rinsed in one acetone beaker

Transferred to second "clean" beaker

Scrape off the surface

Ultrasound cleans off remaining residue

Checks chip is clean using microscope attached to a computer screen

Puts chip back in the credit card sized smartcard holder

Chip is made up of two layers with a third layer as a security layer on top

Need to burn a hole through the top layer to reach metal on the second layer

Hole is made using a mask (nail polish?)

Mask is left to dry

Micropositioner holds a sewing type needle to scratch a hole

Want to scratch a middle area where the databus is and a control line on the side

Leave the needle where it is and remove from under the microscrope

Drop of hydrofluoric acid (in "Rust Stain Remover" bottle) for 30 seconds

Hydrofluoric acid is resistant to nail polish and magic marker

Rinsed in water

Then check how deep the acid etched under a microscope

Repeat etching using 15 seconds (rate of etching increases with volume of acid and temperature)

Rince in acetone

Using UV light expose the lines of the chip (under microscope)

Sit on the data bus with the needle. Yellow line (on oscilloscope) is what the needle is touching. Blue line represents Chris resetting the card.

Build a log of what the chip does when it powers up

800 hexadecimal samples

Can send management message to the chip and see what is done to decrypt it

Can do anything at this point: read EEPROM, ROM