DEF CON 29 - Rion Carter - Why does my security camera scream like a Banshee?

[@SimplyCyber]

Great talk. Your delivery, cadence, and content is excellent. Thanks for contributing. btw, "Go Jawas!" lol.

[@Antaquelas]

I am watching this before I sleep. His voice helps.

[@MrGreenotwo]

ASMR @ Defcon

[@wojciechwilimowski985]

After watching this talk I can now understand what R2-D2 is saying

[@ssprinklep9107]

That noise broke me! Glad you went with "listen to this" preceded by promptly deafening half your viewers. Also I think you may have configured my camera... Great. Otherwise it really was a great talk.

[@artiem5262]

Thank you for a wonderful overview of the reverse engineering process!

[@johnm7963]

Great analysis Rion. Love to see more on the payload, camera --> cloud.

[@sean9761]

Amazing talk really enjoyable to listen and learn.

[@glanoe]

Eufy Security cameras and doorbells use sound to pair the devices to the iot hubs.

[@JamesMCrutchley]

Volume is very low and it seems like speaker is whispering

[@sietuuba]

Mistake in the transcript at 2:51 which should read "This is what really piqued my interest" [...]

[@Penguin-org]

He is so humble

[@casualgamer1791]

great work!

[@TemporalRecall]

Audio sounded like the Chirp protocol 🤔

[@petergamache5368]

Thanks for sharing this! Reversing audio protocols seems similar to reversing proprietary radio frequency protocols, albeit using different tools for several of the steps. Do you have experience reversing RF comms?

[@grythumn]

Please boost the audio gain for the voice and turn down the configuration sample.

[@coder_rc]

The bad voice you have, the better hacker you are.

[@unrealzocker]

Play the video in VLC or similar.

[@amir3515]

@@unrealzocker No amount of gain in VLC made a difference

[@unrealzocker]

@@amir3515 it's possble to go over 200%

[@emolatur]

@@coder_rc Sure. The worse your voice, the more capable you should be of finding the "normalize" function in your favorite video editor...

[@XbotcrusherX]

Good talk, I'm rather curious why your first thought was 56k, that's *way* too fast for an acoustic modem, especially in free air rather than a sealed coupler. You'd be looking at a much slower standard assuming it was borrowing from old acoustic modem standards

[@probablynot8154]

I think it was interesting to compare against something most people can think of for a first idea to get on the path towards the actual standard.

[@CyReVolt]

Goke is a common IP camera SoC vendor, just FYI. ;)

[@nyanray]

Interesting topic, but whyyy is the audio so low? :(

[@lazu2819]

So is this camera very easy to hijack? If this camera(not belonging to you) was found installed somewhere on (or within range to a) Wifi network that you know the SSID and pass phrase of. 1 Make yourself a cloud account. 2 Download the pairing app and enter the populate the fields 3 Power-cycle the camera putting it into setup mode and play the tone sequence. In theory now the camera is connected to your cloud account? (would 100% not recommend doing this without the permission of the owner of the device)

[@da1g]

Why's this guy whispering

[@Nicholas-f5]

Could get signal straight from speaker wire?

[@agenericaccount3935]

Calm down Julia

[@nyanray]

Me, before scrolling to the end of the comments: "what?" Me, looking up from the bottom of the commens: "ah, yes... Julia, chill out, pls."

[@nitroburp2694]

Good info, but why does Rion whisper?

[@mikemcdonald5147]

why is he whispering? is this top secret and he doesnt want anyone to hear him?

[@LarryTheRoleplayerTM]

Looks like ALE

[@JNET_Reloaded]

CANT HEAR YOU!!!!!!!!!!!!! SPEAK UP!!!!!!!!!!!!! LOUDER!!!!!!!!!!!

[@JuliaClark]

A proper computer camping to my personal whistle will open

[@JuliaClark]

To print the camera

[@JuliaClark]

/ whistles and hacks the cameras

[@amir3515]

are you a bot

[@JuliaClark]

What is the point of this lesson ?

[@JuliaClark]

Nice to meet you 😊

[@JuliaClark]

I miss this. Before the B of LM legal development purposely disrupted me. I studied and published.

[@JuliaClark]

👋 nice to.meet you here.

[@JuliaClark]

Every time you use a fingerprint is is different

[@JuliaClark]

Duh

[@JuliaClark]

This is not complicated. Unique sound is a fingerprint. To hack this insert sound like you would a fingerprint

[@JuliaClark]

The rat is in the insertiom

[@JuliaClark]

Just make a fake profile to hack a sound print

[@JuliaClark]

It is a type of finger print. Just.like if I whistled.

[@JuliaClark]

Data is coded.

[@JuliaClark]

It is a dog whistle, easy.