DEF CON 32 - Anyone can hack IoT- Beginner’s Guide to Hacking Your First IoT Device - Andrew Bellini

[@Twoshoes22Jason]

Probably one of the clearest and most concise talks this year from what I've seen so far

[@the_sandman00]

Found 5 vulnerabilities on the first day. 1 critical, 1 high. Thanks man. This sparked a curiosity

[@the_sandman00]

@ portscan-> found ftp -> did enumeration-> found default cred login -> in ftp rootfs access is granted -> dumped entire filesystem-> can modify entire fs, etc

[@SmallTimeTrees]

@@weihe1220did you watch the video?

[@coffeehousephilosopher7936]

This is why I love this channel, any talk I might have had to miss or force to choose over the other is right on this channel... Thanks DEFCONconferences

[@heatherryan9820]

Just learned a lot, thanks. I love watching these DEFCON talks, because I’m never able to go, so it’s nice that we can still get acres to the talks because every year I seem to learn so much from these.

[@chsovi7164]

"we're expecting there to be a big surge of IoT devices because of AI" is just about the scariest news someone could drop

[@davidekow]

That joke at the beginning sent me down a rabbit hole of security jokes 🤣

[@74Gee]

Without a doubt this is the best IoT hacking speed run out there.

[@Entropy67]

Wow super useful talk, thanks! I've been interested in IoT hacking but too busy to look into it, I just happen to have almost all the tools and a cheap router... And some free time...

[@daviddunkelheit9952]

Power capacitors that are discharged can develop ‘phantom charge’ as the dielectric was in a contrary position physically for longer duration. Ambient charge is enough to cause the capacitor’s to return to previous charged state.

[@theodorekorehonen]

A lot of devices nowadays have parasitic resistors to make them safe(r) but I still always short the big filter caps just to make sure. And I do indeed get some sparks sometimes

[@frankwuolukka2087]

Great presentation, thank you for the clear and concise talk. I believe you said that folks there could get a copy of your slides but would you mind making them available to the rest of us?

[@joew1865]

What was the software being used in the Reverse Engineering binaries & libs section?

[@joew1865]

Nevermind... it's called Ghidra

[@daviddunkelheit9952]

@@joew1865 yes and it is suggested to use with Amazon Coretto rather than regular Java

[@stevet7522]

These talks just reinforce the reason i dont have IoT, smart devices, or really much of anything in my house. The fact that i have wifi makes me paranoid enough.

[@Frappe3621]

My iot lights use WiFi to make themselves into motion sensors! They send it between themselves and see where they are interrupted! Any WiFi enabled device could potentially do this, your WiFi can tell where you are in your house

[@jean-naymar602]

@@Frappe3621 New fear unlocked.

[@cracc_baby]

bruh im kinda scared rn.. my cats new litterbox needed to connect to wifi (allegedly for firmware updates) same with the vaccum! both made in china btw :(

[@dannyarmata8878]

Thanks for this I really appreciated the information, finally understand what I was doing when I soldered all those wires to my Xbox 360 board I never knew why it was called JTAG but now I do

[@exohive5608]

Damn I needed this; thank you for this! Been looking for something like this.

[@_bergee_]

As a non-eglish speaker I heard "The 'ASS' in IOT stands for security" :)

[@eyezikandexploits]

Been making my own showdan type project locally scanning for IoT and rigged a grep script for it

[@Pinkman875]

somebody knows any resource to keep digging in the iot / hardware hacking?

[@AndreeaCe]

1: pick the target, usually the target is the device not the person. Usually...

[@BsktImp]

07:58 Capacitors at even 5V or 12V: "hold my beer."

[@claasschlueter]

Really enjoyed it! Thanks

[@GameX236]

Sounds fun!

[@AnonymousVv3]

Like Harvard or EC-COUNCIL University or etc for cyber degrees

[@vegasroller7026]

6:22, just making a timestamp for myself to get started.

[@mk71b]

8:55 He should have said "unplug the power cord."

[@daviddunkelheit9952]

I followed this beginner guide and I just couldn’t hack it.

[@AmandaCook-rc8ce]

Hack or be hacked. It's like being blind and while they all can see.

[@Spractral]

If someone needs a definition for firmware, I don't think they need to be trying to follow this tutorial just yet.

[@andrewc.2952]

Is it sad that my immediate definition for an LoT device is that it means "Left on table". 😂 Like when people leave their devices unattended. Don't mind me, kinda new here. Lol

[@ZambeziSentinel]

I took screenshots of all the slides and fed to my AI to summarise. Did a good job 😊

[@ShermaMahdi]

Amazing idea💥 Did de same thanks

[@3rdeyesociety]

why wouldnt you just copy paste the transcript...

[@ZambeziSentinel]

@3rdeyesociety on phone and can't copy. Tried that first

[@ZambeziSentinel]

@@3rdeyesociety I tried but phone would not let me. Took a while to get every slide lol

[@radwizard]

Remember those books from the 90s and early 2000s that claimed this…. But when you read them, they are the basics to using a console or lessons on OSI and TCP/IP? 😂❤

[@XRatedPoetry]

We need 6 more likes on this video! No more, no less!

[@criticalgrower]

When i see someone Who really knows what he s talking about ❤ how much i love that stuff unfortunately i m not lucky and good enough to make a living with it Bless Bellini ciao

[@AnonymousVv3]

Botnet: Online DDOS or DOS attack.

[@Nicholas-f5]

Anyone hardware hacking in Austin, feel free to PM

[@iluvyunie]

this is why I never use my phone or pc to control any of these things