~/talk

Hacking the Wireless World with Software Defined Radio - 2.0

Talkat Black Hat Asia 2015 · 2015-03-24..03-27· [embedded-and-hardware, security]
links:none on file
slides:none on file

Live demos use GNU Radio and USRPs (B200/B210/x310/e310) to capture up to 56 MHz of spectrum, run an OpenBTS 2G base station from a USB-powered board, and pull real GSM control bursts and a 20 dB signal lift from a drone at ~25 m altitude. A QPSK video link off the drone works; a keyless‑entry LF→UHF relay prototype fails due to latency. Backscatter toll tags and restaurant pagers are decoded and replayed, and ISEE‑3’s 2 GHz transponder is contacted after recreating vintage modems.

AI-written summary · about

  1. 0:00Start
  2. 0:49Overview
  3. 3:48Dialplan
  4. 10:54Scanning
  5. 11:24Energy Detection
  6. 12:04USRP B200 & B210
  7. 28:05Challenge
  8. 35:01Preamble Detection
  9. 38:03Channel Selection
  10. 38:13FSK Deviation
  11. 38:45Baud Rate
  12. 39:08Step 5: Clock Recovery
  13. 39:23Line Encoding
  14. 39:45Manchester Encoding
  15. 40:08Compare Changing Bits
  16. 42:06Slider
  17. 42:35POCSAG Decode
  18. 43:42ZigBee Transceiver
  19. 44:12Hostage Pager
  20. 49:51Dual Channel Recording
  21. 50:17Propulsion System
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.