Comment Re:wat (Score 1) 129
This is the most ridiculous claim the "researchers" made.
The control opcodes and registers the researchers found were neither meant to be inaccessible nor left in by mistake. They were just undocumented, because Espressif expects integrators to use the provided protocol stacks. Building half of a radio in software is Chad-level engineering, presents numerous challenges for certification, and would be a nightmare to provide tech support for. Nobody bothered reverse-engineering the provided protocol stacks because it's a difficult task that only leads to harder challenges.
Undocumented opcodes and registers are extremely common. A company may have special diagnostic commands used at the factory to validate chips that they don't share with their customers. Qualcomm has peripherals on its CPUs that it doesn't document the interfaces for and expects integrators to use the provided drivers. Or maybe a command was too buggy so it was erased from the documentation and never disclosed.