Backdoors in Back Doors
summary
Pen tests extract root from a smart fridge via JTAG and pull email creds from drive‑bys; a fingerprint lock uses a static BLE salt plus a crackable six‑digit PIN so walking past it unlocks doors, and its physical shim bypass pops it open. A Wi‑Fi kettle exposes telnet with a 000000 telnet PIN and reveals Wi‑Fi PSKs; a kids’ doll acts as an unpinned Bluetooth headset with a local DB of 1,536 swear words. API flaws let attackers track or spoof 20,000 children (32 million devices across ~1,000 models) and remotely immobilize or eavesdrop on ~2 million cars. A cold‑boot attack recovers seeds from a claimed “unhackable” wallet; many devices reuse insecure SDKs and vulnerable Rockchip flash modes.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:24Meet Ken Monroe
- 2:52Responsible disclosure
- 3:34Smart lock vulnerabilities
- 4:58Reverse engineering Wi-Fi kettle
- 8:07Hacking Kayla doll
- 11:15IoT security flaws
- 12:40GPS tracking watches
- 15:51Hot tub no auth
- 17:14Mirai botnet flaws
- 19:46Taplock security flaws
- 23:35Car alarm vulnerabilities
- 29:55Remote kill and snooping
- 33:00Bitfi wallet flaws
- 44:13IoT hardware flaws
- 45:16Old vulnerabilities unpatched
- 48:11Regulation on IoT
- 53:33Q&A
related talks
30mVulnerabilities in the Internet of Things
37mOpen Sesame! The full story behind opening a smart lock
45mOutside the box: pwning IoT devices through their applications
41mUnlocking Any Door In 21st Century. Immersion In Bio-Security
59mIf You Can't Open It, You Don't Own It
32mCommon Attacks on IoT Devices
36mOpen Sesame - Or How Secure Is Your Stuff In Electronic Lockers
50mSmart Nest Thermostat: A Smart Spy in Your Home