Oct 2, 2026 06:36 PM
(This post was last modified: Oct 2, 2026 06:50 PM by Cap.)
Background: I run TISS (tiss-ai.uk), a Tesla-focused independent service shop in Hong Kong. I'm doing authorized security research on a Tesla MCU-Z unit I own (AMD Ryzen V1000 SoC, same target as the TU Berlin Black Hat 2023 paper).
▎
▎ What I have:
▎ - Tesla MCU-Z board (pulled from one of our workshop cars)
▎ - Voltage glitch PCB — Teensy 4.0 + 74LVC07A, SVI2 bus injector
▎
▎ What I need:
▎ - SVI2 trace identification on my specific board revision
▎ - BIOS dump + PSPTool firmware modification workflow
▎ - End-to-end attack chain execution (signature glitch → PSP code execution)
▎
▎ Reference: PSPReverse/amd-sp-glitch + "One Glitch to Rule Them All" (Buhren & Jacob, BH EU 2021) / "Jailbreaking an Electric Vehicle in 2023" (Werling et al., BH USA 2023)
▎
▎ Compensation: Negotiable, paying proper consulting rates. Remote preferred (I can ship the board), on-site in HK also fine.
▎
▎ Reply here or email: Content deleted to prevent possible harm to our members. -Staff
▎
▎ What I have:
▎ - Tesla MCU-Z board (pulled from one of our workshop cars)
▎ - Voltage glitch PCB — Teensy 4.0 + 74LVC07A, SVI2 bus injector
▎
▎ What I need:
▎ - SVI2 trace identification on my specific board revision
▎ - BIOS dump + PSPTool firmware modification workflow
▎ - End-to-end attack chain execution (signature glitch → PSP code execution)
▎
▎ Reference: PSPReverse/amd-sp-glitch + "One Glitch to Rule Them All" (Buhren & Jacob, BH EU 2021) / "Jailbreaking an Electric Vehicle in 2023" (Werling et al., BH USA 2023)
▎
▎ Compensation: Negotiable, paying proper consulting rates. Remote preferred (I can ship the board), on-site in HK also fine.
▎
▎ Reply here or email: Content deleted to prevent possible harm to our members. -Staff
The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.
Please familiarize yourself by reading our Help Documents.
