News for hackers. Stuff that matters.

A comment on Espressif's Response to Undocumented Commands in ESP32 Bluetooth by Tarlogic. Parent comment

Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by unsnap_biceps on Tuesday March 11, 2025 @05:23PM (#43337146)
Why does that matter at all? There's no persistence granted by the debug commands. When you flash it with your firmware, it's clean. If you trust the firmware that ships, they can do arbitrary code in it, so why care about a few debug interfaces?
[ Parent | on HN ]
Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by red-iron-pine on Wednesday March 12, 2025 @11:56AM (#43344566)
why does a supply chain attack matter? ITT we don't understand supply chains.

let's ask a few Hezbollah types about their pagers...

[ Parent | on HN ]
Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by ajross on Wednesday March 12, 2025 @12:03PM (#43344658)
You're not responding to the full statement. Grandparent was saying that a supply chain attack is not possible with this exploit ("exploit", I guess -- again there's no security boundary being crossed here), not that supply chain attacks don't matter in the abstract.
[ Parent | on HN ]