Keyless Entry: Hacking SwitchBot Smart Locks

Neodyme's security team reverse-engineered the SwitchBot Lock Pro and found several vulnerabilities, the worst a misuse of AES-CTR in its Bluetooth protocol that lets anyone nearby silently unlock the door in a software-only attack. The write-up walks through the firmware analysis, the attacks, disclosure, and the fixed firmware and app versions.

Research · Security · Hardware · IoT

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

Long-form version of Quentin Kaiser's Hexacon 2026 talk: a WPS EAP reassembly overflow in Broadcom's proprietary 802.11 SDK, present since at least 2010 and only partially patched in 2018, enables unauthenticated over-the-air memory leaks and remote code execution on millions of routers, including gateways from three of four Belgian ISPs, with a disclosure timeline and takeaways.

Research · Security · Vulnerability Research · Networking · Hardware

Local and Distributed Large LLM Inference with MLX and RDMA on Mac Studio

Apple Machine Learning Research explains how MLX plus RDMA lets large open-weight models run locally and across networked Mac Studios—covering distributed inference setup aimed at the Muse Spark Open and similar workloads.

Research · AI · Machine Learning · Apple · Hardware

Minions: A Dynamic and Distributed Virtual GPU Cloud Built on Idle Apple Silicon Devices

Apple Machine Learning Research paper presenting Minions, a dynamic, distributed virtual GPU cloud that aggregates idle Apple Silicon GPUs across macOS devices to run large-scale ML inference with fault tolerance and efficient resource use, without new GPU procurement.

Research · Machine Learning · Infrastructure · Hardware · Research

Automatic Transmission — a data-privacy study of connected vehicles

Northeastern researchers (with Consumer Reports) present a large-scale measurement of the connected-vehicle ecosystem: 21 late-model cars and 30 companion apps, third-party trackers, disclosure gaps, and why vehicle data sharing needs more transparency.

Research · Privacy · Security · Research · Hardware

One CPU Atomic Instruction, One Packaging Infinite Loop: The Story of the Lost Update on LA664

Jie Ge documents a Loongson LA664 erratum where an atomic instruction can lose updates, how it surfaced as an infinite packaging loop, the root cause analysis, and what it means for correctness on that CPU.

Research · Hardware · Systems Programming · Debugging · Engineering

The Economics of Open-Weight Inference

How open-weight demand can support the useful life of NVIDIA GPU families. Selected figures and tables, limitations, and the full PDF.

Research · Economics · LLMs · Infrastructure · Hardware

Getting 50 GB/s Back Out of the ANE

Eileen Yoon identifies an RTL performance bug in the Apple M3 Neural Engine where DRAM throughput collapses from 45–60 GB/s to 17–19 GB/s whenever total weight size is an exact multiple of 1 MiB. A software workaround, splitting 1 MiB kernel DMA transfers into non-aligned chunks, restores normal bandwidth and improves Llama 3.2 1B token throughput from 10 to 24 tokens per second.

Research · Apple Silicon · Neural Engine · Performance · Hardware

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers

Claroty Team82 details vulnerabilities in widely deployed Danfoss AK-SM 800A supermarket refrigeration controllers, how attackers could disrupt cold-chain operations, coordinated disclosure with Danfoss, and hardening guidance for operators.

Research · Security · Infrastructure · Hardware · Research

Semantics for 2D Rasterization

Kulkarni, Whiting, and Panchekha introduce μSkia—a Lean-mechanized formal semantics for Skia 2D graphics—and an optimizer that speeds rasterization ~18.7% on Chrome-derived Skia programs while proving replacements correct.

Research · Research · Performance · Programming · Hardware