Groovy X Ray Reverse Engineering like its the 70s
Where
Talks
ShmooCon 2024
Duration
51 min
Shows how film can replace a missing digital sensor when imaging electronics with a cabinet X-ray machine.
Summary
The talk opens with the cost problem. Cabinet X-ray machines turn up cheaply at auction, but the digital sensor that makes them useful is expensive, and some used units arrive without one. X-rays cannot be focused like visible light, so a sensor must match the size of the image, which keeps prices high. The speakers propose film as a workaround and show sample images of a mouse caught in a trap, a garage remote switch, a potted microcontroller, and an RFID reader.
The middle covers the method. Large-format black-and-white film, a diluted developer and fixer, a light-tight holder made without metal parts that would block X-rays, and a changing bag are the basic supplies. Exposure is scripted over the serial port, with tube voltage near the machine's maximum and exposure times measured in minutes. Development is slow and forgiving, and the film is dried for hours before scanning on a light table or with a camera on a copy stand. The speakers also tested instant Polaroid and Instax film, which needs a brief pre-flash and develops by rolling through chemical pouches. Polaroid results were softer.
The closing section covers limits and results. Thick boards with heavy copper need higher-contrast development rather than longer exposures, because scatter raises noise along with signal. Examples of a Thunderbolt dock board, an iPhone board, and an SD card show component locations and bond wires. The speakers conclude that a hobbyist can produce full-size, high-detail images cheaply, and they stress basic radiation checks before use.
Related talks
Talks·31 min
Inbar Raz
Shows how an obscure payphone CPU was reverse engineered by writing a Ghidra processor module and patching ROM firmware.
Talks·39 min
Travis Goodspeed
Shows how photographing and chemically delayering mask ROM chips lets their stored bits be extracted with a Qt6 tool.
Main Stage·18 min
Stacksmashing
Reverse-engineers a Sea-Doo jetski's diagnostic protocol and one-wire key interface to build an open-source, programmable replacement key.


