Reverse engineering Eufy HomeBase 2 firmware and hardware debugging
What happened
An October 16 report says security researchers reverse-engineered the Eufy HomeBase 2 on hardware running firmware 3.4.2.2h, recovering the credential-generation algorithm that OCEAN_XXXXXX uses to manage WiFi. Because the Winbond 25Q256JWEQ flash chip is soldered directly to the board, powering it for a read would activate other components, so the team desoldered the chip and read it offline, damaging one 64KB block in the process. They also reflashed a backdoored U-Boot image to bypass the UART lockout and get a shell.
Written by AI from the coverage · updated 3 hours ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageA story of WiFi secrets, UART lockdowns and a damaged flash memory chip
安全研究者对 Eufy HomeBase 2（固件版本 3.4.2.2h）完成硬件级逆向，拆解出 OCEAN_XXXXXX 管理 WiFi 的凭据生成算法，并通过重刷植入后门的 U-Boot 镜像绕过 UART 封锁拿到 shell。由于 flash 芯片直接焊在板上且读取时供电会激活其他元件，团队只能将 Winbond 25Q256JWEQ 芯片拆焊后离线读取，过程中损坏了一个 64KB 块。
Heat over time
Not enough continuous observations to draw a trend yet.