In an era where digital security is paramount, the concept of laser hacking might sound like a plot from a high-tech thriller. Yet, this futuristic idea has been made startlingly accessible thanks to the ingenuity of two cybersecurity experts from NetSPI, who have introduced a groundbreaking tool called RayV Lite. Their invention was highlighted at the recent Black Hat cybersecurity conference in Las Vegas, capturing the attention of both hobbyists and professionals.

What is RayV Lite?

RayV Lite is a 3D printed device that leverages a $20 laser pointer to perform sophisticated laser fault injection—a technique that disrupts the operations of microchips by knocking electrons out of place. Traditionally, such feats required expensive equipment, but RayV Lite's creators, Sam Beaumont and Larry "Patch" Trowell, have democratized this advanced technology with a build cost of just $500. This device is constructed using common components like a Raspberry Pi and parts from an open-source 3D printed microscope, making advanced hacking techniques more accessible and affordable than ever.

The Goal Behind RayV Lite

The primary aim behind developing RayV Lite is to raise awareness about the vulnerabilities of modern microchips and to push manufacturers to enhance their security against such laser-based attacks. Historically, companies have overlooked these vulnerabilities due to the high costs associated with laser fault injections. By proving that such attacks can be executed inexpensively, Beaumont and Trowell hope to influence hardware manufacturers to prioritize and fortify their security measures.

How Does It Work?

Image credit: EThamPhoto via Getty Images

RayV Lite uses precise, timed laser pulses to cause glitches in chip operations, allowing hackers to bypass hardware security and access protected information. This method has proven effective in various tests, including one where the device bypassed automotive chip security checks and another that compromised a cryptocurrency wallet by simulating the entry of a correct PIN.