Colin O'Flynn

ChipWhisperer

Wed, 15 Jul 2026 00:00:00 +0000

Open-source toolchain for side-channel power analysis and fault injection.

Danni — Steam Engine

Wed, 15 Jul 2026 00:00:00 +0000

Restoring and running a small steam engine.

Making it Small

Wed, 15 Jul 2026 00:00:00 +0000

Small-scale electronics production book — lessons from building NewAE in a spare room.

PicoEMP

Wed, 15 Jul 2026 00:00:00 +0000

Low-cost electromagnetic fault injection tool built around the RP2040.

Starting a notes section

Wed, 15 Jul 2026 00:00:00 +0000

An example note, so the section renders. Notes are deliberately short — a measurement, a part number, a dead end worth recording. Create one with:

hugo new notes/whatever.md

The archetype fills in the title and date, so a note needs nothing but a body.

Teardown Archive

Wed, 15 Jul 2026 00:00:00 +0000

PLACEHOLDER — an index of the teardown posts, pulled together in one place.

The Hardware Hacking Handbook

Wed, 15 Jul 2026 00:00:00 +0000

Book, with Jasper van Woudenberg — breaking embedded security for fun and profit.

Announcing my "Small Scale Electronics Production" Book

Sun, 11 May 2025 13:09:53 +0000

During the pandemic I started a project I long wanted to do, which is to write down many of my lessons learned around building a hardware business. While this has now taken much longer than planned, I’m approaching a (hopeful) end of the draft process over the next couple of months. In combination with my Amp Hour discussion with Chris Gammel, I thought it was a good time to “officially” announce this!

Small Scale Electronics: Making it Small (The Book!)

Sat, 10 May 2025 23:11:22 +0000

What is this about? This is a book, that is being released with No Starch Press sometime in 2025/2026. This book chronicles many lessons learned in building NewAE Technology Inc, from how to deal with inventory and accounting systems to how you setup small-scale production in a spare room.

Achieve your most mediocre electronics production and sales dreams.

(Planned) Chapters:

Setting Up a Hardware Business
Costs, Pricing, and Accounting
Protecting Your Idea
Patents
Electronics Prototyping and Through-Hole Soldering
Surface-Mount Soldering and Equipment
Repair Techniques and Equipment
Static Control
Protective Equipment, Cleaning, and Storage
Production Soldering
PCB Design for Small-Scale Production
Contract Assembly Manufactures
Testing and Inspection
The JTAG For Testing Industry Standard
Enclosures
Milling Enclosures
Connectors and Cabling
Contacts and Crimping
Product Packaging
Barcoding and Tracking
Compliance
Product Security
Marketing
Fulfillment and Shipping

My Making Story

Modifying Welding Pedal for a Miller 6-Pin Connector (ArcCaptain Pedal)

Mon, 17 Mar 2025 02:45:53 +0000

I bought a Miller 161 STH welder which has a little hand remote control included, and found it was more difficult to use. I wanted to try a welding pedal but the miller ones are much more expensive than other brands, like ArcCaptain, and I found the ArcCaptain one sturdy enough. This post is how you can adapt other welding pedals to the Miller 6-pin connector. I made a video about the process, this post has the reference material:

My 2003 Low Cost SMD Soldering Guide

Wed, 15 Jan 2025 12:03:46 +0000

Back in 2003, I wrote a guide for AVRFreaks.net about low-cost SMD soldering. I had never mirrored this to my website, but recently needed a more permanent link to it for a PCB introduction lecture.

The information may no longer be the most current (22+ years later!), but I wanted to keep an official mirror of it on my website. You can find it inline below:

Fixing Ubiquiti Dream Machine (UDM) SE Hard Drive Not Detected Errors

Wed, 11 Dec 2024 02:34:43 +0000

My UDM SE can fit various hard drives. Ubiquiti have decided to have a cool tray the hard drive snaps into & slides into the UDM, which also means you have to have a very good fit. As it turns out, the fit may not be good enough without shimming the drive out!

I used a Seagate Skyhawk 4TB Video 3.5 Inch SATA (ST4000VXZ16/ST4000VX016) drive, which is reported as being compatible. In sliding the drive in there was no spin-up sound. I then tried rebooting it & repositioning the drive several times, it wasn’t clear if the hot-swap should work or not. But there was never a spin-up sound or a LED flashing on. Very annoying, especially if you are rebooting your houses internet for a “5 min project”!

All Blog Posts

Sun, 08 Dec 2024 17:25:44 +0000

Dumping Parallel NAND with Glasgow

Sun, 14 Apr 2024 23:00:05 +0000

I recently got my Glasgow device, which is a rather impressive piece of tech. I followed the Windows installation instructions and it “Just Worked”, including installing the toolchain! On one computer I needed to use Zadig to force the driver to be libusbK, but on another Windows computer it wasn’t needed. In this blog post, I’m going to explore a parallel NAND device that I wanted to dump, and find out how well Glasgow works.

ECED4406 - Computer Security

Thu, 07 Sep 2023 11:54:24 +0000

The class primarily uses Brightspace at https://dal.brightspace.com/ . Due to the lockout by Dal for 2025 Fall term this is not setup.

This page was used as a resource that could be viewed during the lockout, but is now not maintained.

Lectures from the 2020 Edition at https://www.youtube.com/playlist?list=PLyAXNQGte3qNNbs8J3gE8JkpAJ9_OH75q . Note the 2020 was online-only, so some labs/items changed in 2022 and later editions of the course.

RECON 2023: Adventures of My Oven (Pinocchio) with ChipWhisperer

Fri, 09 Jun 2023 14:40:27 +0000

At RECON2023 I gave a talk about reverse engineering my Samsung Oven. This blog post has slides & links to information, with more to come! You can get a copy of the slides below:

OFLYNN-RECON2023 Download

Oven-Specific Stuff: https://github.com/colinoflynn/samsung-ovens-deconstructed
Python Loader for TMP91 Series: https://github.com/colinoflynn/pytoshload
Resource CD for TLCS900: https://github.com/colinoflynn/Toshiba-TLCS-900-L-Resources

Intel LGA1700 (12th/13th gen, i9 3900k) Top Resistors/Capacitors

Thu, 16 Mar 2023 01:46:06 +0000

If you’re a bit careless with your CPU (especially if e.g., delidding it) you can knock these resistors off the topside. From measuring a known-good device (but without removing them) I measured the following values as a reference:

i9 13900K image source: techpowerup.com

These all appear to be 0402 sized resistors.

If you do damage them, the best source would be another 12th/13th gen device, as they look to be identical. You could find a used/defective low-performance device and use that to get resistors/capacitors.

Danni Build - Feb 11/23

Sat, 11 Feb 2023 13:50:40 +0000

Hours: 8

Parts complete: 1 (lateral support), 2 (cylinder support), 3 (frame base)

Test assembly of three parts built today. The parts come pre-milled, so this was mostly time spent getting setup.

Start of build. Lots of marking & drilling of items, which was done on a milling machine with DRO. Having the DRO read-out is useful here rather than marking pieces I found. I had mounted cheap iGaging DROs to a small X2 mini-mill, there is a YouTube Video of how I did this. Here is drilling some holes in part 1:

New England Hardware Security Day 2022 Talk

Fri, 01 Apr 2022 11:50:25 +0000

On April 1st, 2022 I gave a “workshop” at New England Hardware Security Day. This blog post is a quick summary of some of the links to recreate my demos from that talk. Here is a copy of the slides if you’d like them:

New-England-Hardware-Security-Day-2022 Download

DFA on Raspberry Pi with PicoEMP

Pi on Pi Violence

This demo is pretty simple - it recreates the classic DFA attack on RSA (I find David’s description great here, or you can see my Hardware Hacking Handbook which includes another derivation of it using a different method).

Apple AirTag Teardown & Test Point Mapping

Sat, 08 May 2021 18:24:32 +0000

What’s inside of Apple’s new AirTag? There was already an iFixIt teardown (which I swear was missing a few items that are there now), but of course was curious to see what sort of protection was enabled. Notably the nRF chip used is likely vulnerable to a known bypass of security as well. With that in mind, I set out to see how we could dump some data from this thing - the good news is you can access a lot of interesting stuff (including the SPI flash) right from the backside, which requires you to simply pop the first plastic cover off. This is super-easy to do without damaging anything. Going further than that is tricky to keep it all intact.