Biohacking: The Invisible Threat

on YouTube ↗40m

" summary

Demo shows subdermal implants (FlexNext, VivoKey Spark 2, FlexM1 Magic 1k) carrying NFC/RFID/MIFARE data and a community-built SBC “Peg-Leg” with Wi‑Fi/Bluetooth and SSH. A Proxmark ChameleonMini clone‑and‑replay rewrites an access badge to an implant (handshake) with a byte‑perfect dump; an NFC payload (Leprosy) delivers a Metasploit/MSFvenom APK that opens a remote shell; a browser hook (Flesh_Hook) uses BeEF to enumerate location and local LAN. Peg‑Leg installs are rare but at least one exists; countermeasures suggested: mutual auth, locked passwords, NFC off.

AI-written summary · about

" chapters (15)

1. 0:00Intro
2. 2:04Augmented Humans
3. 2:14History
4. 3:45Who are we
5. 9:00Physical Access
6. 11:00Mobile Access
7. 15:05NFC
8. 16:48leprosy
9. 19:17Demo
10. 21:14Fleshhook
11. 24:28The Future
12. 25:58Legal Morality Ethics
13. 30:46Takeaways
14. 31:22Mitigation Strategies
15. 33:26Closing

" related talks

• 41mJust Another Live Hacking - How Insecure Is Secure Enough?Philipp Kalweit · code.talks 2017
• 32mJavaScript for CyborgsKaty Moe · enterJS 2016
• 37mHacking a Cat — Going Beyond Traditional Attack VectorsNiall Merrigan · Øredev 2018
• 50mBreaking Access Controls with BlekeyEric Evenchick, Mark Baseggio · Black Hat Europe 2015
• 30mCommSec D1 - Keynterceptor: Press Any Key to ContinueNiels van Dijkhuizen · Hack In The Box Amsterdam 2018
• 38mMission mPOSsibleNils, Jon Butler · Black Hat USA 2014
• 47mHacking a Cat — Going Beyond Traditional Attack VectorsNiall Merrigan · NDC Security Oslo 2019
• 46mRFID: Flippers and Access ControlEge Feyzioglu, Billy Graydon · RSA Conference 2024