Reverse Engineering

Hijacking the PS5's RTMP Stream

How the PS5 Broadcast RTMP pipeline can be intercepted and redirected: reverse-engineering the stream path and what that unlocks.

Blog post · Security · Reverse Engineering · Gaming · Networking

Extending Scapy for Hardware Reverse Engineering

VoidStar Security shows how to use Scapy as a binary protocol framework to dissect SPI/QSPI logic-analyzer captures, trace flash erase/program cycles, and reconstruct firmware without desoldering the chip.

Tutorial · Security · Hardware · Programming · Engineering

Building a Linux GPU Driver for the M4 Mac Mini in One Month

Cody Ho and a collaborator reverse-engineered Apple's M4 AGX GPU firmware ABI and built a fully OpenGL ES 3.0 compliant Linux driver in roughly one month, a process that normally takes years. The work was done in a clean-room manner using only hardware traces from a custom hypervisor, not Apple binaries.

Blog post · Linux · GPU Drivers · Apple Silicon · Reverse Engineering

Getting 50 GB/s Back Out of the ANE

Eileen Yoon identifies an RTL performance bug in the Apple M3 Neural Engine where DRAM throughput collapses from 45–60 GB/s to 17–19 GB/s whenever total weight size is an exact multiple of 1 MiB. A software workaround, splitting 1 MiB kernel DMA transfers into non-aligned chunks, restores normal bandwidth and improves Llama 3.2 1B token throughput from 10 to 24 tokens per second.

Research · Apple Silicon · Neural Engine · Performance · Hardware

Retrospectively Reverse-Engineering Apple's Neural Engine

Eileen Yoon revisits the Apple M1 Neural Engine three years after abandoning an open-source driver project, motivated by Apple's decision to fold standalone ANE cores into the GPU in the M5. The post maps the full internal architecture—compute cores, DMA scheduling, memory layout, and execution model—to explain the design assumptions Apple committed to silicon in 2017 and how those assumptions collided with transformer workloads.

Blog post · Apple Silicon · Neural Engine · Reverse Engineering · Machine Learning