DEF CON 29 - Thomas Roth - Hacking the Apple AirTags

[@PixelHamster]

Windows accesability > mono audio = true to fully enjoy

[@PixelHamster]

for linux users, read docs kekw

[@EvileDik]

Listening on a 7.1 surround system is an 'interesting' experience. I have a geman man in the back of my lower neck.

[@dinoscheidt]

This is DEFcon and I am surprised this kind of shit still happens at a pinnacle tech conference. Seriously - sprinting a mile just to trip in front of the finish line 🤦🏻‍♂️🤦🏻‍♂️🤦🏻‍♂️🤦🏻‍♂️ While making fun of tech companies not having the skills to deliver their products properly. 😖

[@DrunkAncestor]

DEF CON ELITE AUDIO HACK!

[@AlecArmbruster]

@@EvileDik You may need to see a doctor about that…

[@_-_-_-_-_-_-_-]

You can make the video play audio as mono, just paste this in to the browsers console: let context = new AudioContext(); let source = context.createMediaElementSource(document.querySelector('video')); let splitter = context.createChannelSplitter(); let merger = context.createChannelMerger(); source.connect(splitter); splitter.connect(merger, 0, 0); splitter.connect(merger, 0, 1); merger.connect(context.destination);

[@jamesweatherwax4444]

Thank you. This works ♥

[@br3nd4n]

Works perfectly on Firefox. Thanks!

[@Koutsie]

thank you !

[@GabrielM01]

legend, works in brave

[@eleventhrealm]

genius, works on Arc browser

[@LarryTheRoleplayerTM]

:( Why audio only 1 channel

[@Kenjic]

Awesome video. Lots of great info. Really cool how you tried to get sound from the accelerometer too!

[@AndrewTSq]

someone hacked the audio..

[@Ipds70GltR]

Makes me sad for Tile. Thanks for this

[@zaprodk]

Actually the "antenna" connector is not an antenna connector. It's a test point for calibrating RF performance. It's not supposed to be used as a connector and there doesn't exist any mating locking connector for it.

[@iwantitpaintedblack]

Such connectors are also seen on smartphones and usually have plastic cutouts which leads me to believe that they actually are antennas

[@nemesis851_]

Ya, the 16 unit limit is annoying.

[@iwantitpaintedblack]

just buy another iPhone for 32items lol, sounds like a poor people problem

[@azureenterprises4070]

What does the black rectangle boxes that have J107S do? I broke one off trying to open the AirTag but the AirTag still connects to my phone…so far.

[@alexoja2918]

Could just rewire the tag so that the speaker is directly connected to an analog pin...

[@HonestAuntyElle]

Reassembly of the airtags is not straightforward if I recall correctly.

[@alexoja2918]

@@HonestAuntyElle Well, even with hot glue all over it it's still pretty small form-factor and would leverage the Apple spy network.

[@lucaswybrandt7058]

So cool! I look forward to see how much we can get out of the AirTag in the future

[@Krazy0]

This talk was going to be much greater if it wasn't for COVID.

[@joiscode3832]

Yo i loved the video and the talk is also good

[@VR_Wizard]

I am a computer science student from Germany and I have some very exciting ideas about what to do with a hacked airtag. Unfortunately I am not familiar with electrical engineering 😥. Is there a step by step guide for dummies which I can follow and where there are all the hardware and software requirements listed and how to use them? I am willing to learn some electrical engineering on the way when necessary but I don't think I am able to figure all the steps out by myself.

[@thewhitefalcon8539]

no but you are from germany so you can surely meet some people who know

[@VR_Wizard]

@@thewhitefalcon8539 Yes but they are to buisy creating our green energy future and have no time for my little hobby engeneering projects.

[@alexoja2918]

So the way to make tracking possible without causing alerts is probably to change the identity of the tag periodically and register all of those identities separately

[@HonestAuntyElle]

That, or it relies on the history of the tag to match the phone >x% of the time, so you just spoof the location to a known fake location 1-x times

[@alexoja2918]

@@HonestAuntyElle Right! Or make an ID-exact copy of the tag / use software on your own phone to report the tag's location to another place every now and then. Maybe a combination. If a single device is used for location a number of times, stop using it (until tag ID has been changed). If no new devices are reachable, change ID to next in the roll and reset blacklist. While an ID is not in use, obfuscate its location history by using your own/VM device(s) to report other coordinates. The tag side code wouldn't take much space if it's just a conditional statement for ID and, say, five IDs.

[@kitecattestecke2303]

Kill the speaker?

[@alexoja2918]

@@kitecattestecke2303 Why bother? Well, a well-place stab with a screwdriver would suffice.

[@iwantitpaintedblack]

@@kitecattestecke2303 it shows prompt on phone so the person is aware he is being tracked

[@PatrykPaluszek]

Recorded on the infamous pringles can

[@ZacKoch]

Nice work 👍

[@MikeTrieu]

It's interesting how you don't even have to rip out the speaker assembly to silence the warning chirp. Just flashing a modified firmware that regularly increments the device ID is enough to make the Find My network think its a different device every time.

[@superjaykramer]

You are very smart!.. ofcourse you are from germany

[@CRSolarice]

Please!! Enough before we start... Just get on with it for crying out loud!!

[@basspuppy133]

The beauty of KZbin is that you can scrub the video to whatever timestamp you want!

[@CRSolarice]

@@basspuppy133 I admit that ads and blatant sellouts really burst my bubble. While I do attempt to understand that a person would have a desire to make as much $ as possible some people just go overboard. When someone puts their reputation on the line and at the same time manipulate or exploits their viewers, well, that doesn't sit well with me. I've been disappointed by some of my favorite video 'producers' by this $-grab syndrome, especially when they obviously know very little or nothing of the product and throw all to the wind and hope for the best. Personally I would never allow myself to do anything that would be disrespectful to my audience or anything that 'could be'. I understand how people will want to stand up for their favorite video producers as well and that's fine too. I'm not trying to be disrespectful or anything only express that it disappoints and frustrates, me. Maybe I have thin skin or high expectations, probably both but my advice to 'contributors' is to respect your viewership, quality not quantity and have some dignity. It does and will matter and I have the thought that some may agree.

[@Server0750]

Hackers that can't set there mic,..

[@FullSendPrecision]

hackers that can't spell their

[@spoon_bomb]

Hackers that can't fix the sound themselves and keep whinning for nothing ...