Hacker News Reader

the actual board is embedded in epoxy and will destroy encryption keys if tampered with.

If, by "the actual board", you mean the HSM -- that hardly matters. If an attacker can seize control of the application processor over JTAG, they can command the HSM to do whatever they want.

Where do you see the JTAG?

The eight-pin footprint next to the FCC logo is the VideoCore JTAG connector. The connector isn't populated, but the signals are all there and usable (AFAIK).

This is actually one of the attack vectors I'm thinking about trying with the box when I get more time to hack at it.

The accelerometer and temperature sensors / settings could make it a little more difficult, since the heat sink is directly above the processor and one would need to get through it to gain access to the pins.

But it could be possible with some creative solutions. Probably not if all tamper protections are active though.

Could it be disabled?

Reply on news.ycombinator.com