Mathias Payer

"Operator, can you hear me?"A Faithful Line into the UNISOC Baseband

Baseband processors are reachable over the radio at all times. Their most security-relevant logic runs deep inside protocol state machines: the control-plane handlers that gate registration, authentication, and session setup. Analyzing that logic systematically requires introspecting the firmware as it runs, which make...