upvote

points

by zie1ony8 hours ago |
comments
upvoteby Aurornis5 hours ago|
next
[-]
> He did that by connecting oscyloscops to all chip's outputs and started with applying random current on inputs

This is absolutely not how reverse engineering a digital logic ASIC works.

Either the story got embellished through retellings, or this person was a fantasist.

There are people who hack on GPUs but it’s done at the software level.

I did get a kick out of imagining a scene where someone is trying to connect an oscilloscope to a circuit board to reverse engineer the CPU opcodes. That’s like the CSI: Miami version of what this would look like.

reply
upvoteby inigyou8 hours ago|
prev|
next
[-]
You can't do that by applying random inputs to any single-chip GPU - it has far too much state. I can see that perhaps it worked on some of the early multi-chip cards - where one chip was a texture sampler, and so on.

You'll have more luck reverse engineering the software driver first. They're not hidden, you can just open the driver files in Ghidra, the almost-universal tool for open-sourcing proprietary code. Hidden opcodes can be discovered first by just trying all the opcodes you couldn't discover any other way. You only need to go to the physical level if they're really hidden.

reply
upvoteby JSR_FDED4 hours ago|
parent|
next
[-]
Small pedantic nit: Open-sourcing is not the same as reverse-engineering.
reply
upvoteby sigbottle7 hours ago|
parent|
prev|
[-]
To be fair, Ghidra was released in 2019 and in general knowledge was still hard to find even back in 2010 I feel (well, compared to 2026 in the age of AI)
reply
upvoteby inigyou7 hours ago|
parent|
[-]
Before that there was, and still is, IDA Pro. Works largely the same but costs a lot, on the order of $1000/seat/year. Useless for hobbyists unless pirated, but reasonable if it's your job. Probably had academic discounts.
reply
upvoteby rzzzt5 hours ago|
parent|
[-]
Also a few free-but-cut-down versions like 5 (which still recognizes MS-DOS executables). I'm not going to recommend downloading it from any of the locations mentioned here but it's out there: https://reverseengineering.stackexchange.com/questions/19179...
reply
upvoteby tverbeure7 hours ago|
prev|
next
[-]
There is absolutely no way that happened. 15 years ago, we're talking Fermi class GPUs and chips with hundreds of millions of bits of on-chip state and much more if you include the DRAM.

You can't tease out the right information by applying random inputs. Which input would you even use? The PCIe interface? You'd first "randomly" need to get past its complex training sequences...

Your postdoc probably wrote micro-benchmarks of some sort. That is a common technique.

reply
upvoteby kjs37 hours ago|
parent|
[-]
And you don't use an o-scope in anycase, since you'd need...what...a thousand of them to watch all the signals. You'd use a logic analyzer. I think I read somewhere that those older nvidia chips had something like 2000 BGA balls, and Tektronix does make an LA that can scale to 2000-something channels (TLA7000), for a modest US$500k or so. Then you gotta figure how to mount the thing to attach the probes.

So...agreed...far more likely there was a software solution of some kind if this happened.

reply
upvoteby pixelatedindex6 hours ago|
prev|
[-]
“oscyloscops” is a way better spelling I gotta say.
reply