Attacking IoT Telemetry
summary
Demonstrates practical attacks on IoT telemetry by passively sniffing Bluetooth (recovering LAP, UAP and clock n to decode packets) and exploiting a multisensor Bluetooth thermometer that leaks temperature messages; active injection is discussed as more difficult but feasible. Builds working demos using Estimote beacons for triangulation, Intel Edison/Galileo and Raspberry Pi rigs, SDRs, and a Node.js MQTT client that publishes/subscribes via a public Mosquitto broker across continents, with captured packets, device IDs and readings successfully retrieved.
AI-written summary · about
chapters (8)
- 0:00IoT system failure demo
- 3:42IoT telemetry basics
- 13:27IoT market overview
- 23:47Sensors telemetry protocols
- 31:57MQTT explained
- 41:59Attacking IoT telemetry
- 59:07Bluetooth live hacking
- 1:06:01Summary
related talks
55mWhere is this IoT bus taking us?
24mAttacking Bluetooth LE Design and Implementation in Mobile + Wearables Ecosystems
32mCommon Attacks on IoT Devices
28mThe IoT Hacker's Toolkit
49mLet's See What's Out There - Mapping the Wireless IOT
52mIoT Hacking 101: Reverse Engineering The Xiaomi Ecosystem
30mDemystifying IoT/OT Hacks With SDR
47mHacking a Cat — Going Beyond Traditional Attack Vectors