This Makes Hacking TOO Easy - Flipper Zero

  Рет қаралды 5,582,053

Linus Tech Tips

Linus Tech Tips

Күн бұрын

Visit www.squarespace.com/LTT and use offer code LTT for 10% off
Create your build at www.buildredux.com/linus
Banned on Amazon. Seized in Brazil. It’s capable of reading, writing, spoofing, and emulating everything from RFID to NFC, sub ghz RF to infrared, and much more. Is the Flipper Zero is too dangerous to be widely available to consumers, or is that just unfounded fear mongering?
Discuss on the forum: linustechtips.com/topic/14997...
Check out the Flipper Zero here: lmg.gg/DK9yf
Sanpopo NFC Tags: geni.us/3qJ4A
Purchases made through some store links may provide some compensation to Linus Media Group.
► GET MERCH: lttstore.com
► LTX 2023 TICKETS AVAILABLE NOW: lmg.gg/ltx23
► GET EXCLUSIVE CONTENT ON FLOATPLANE: lmg.gg/lttfloatplane
► SPONSORS, AFFILIATES, AND PARTNERS: lmg.gg/partners
► OUR WAN PODCAST GEAR: lmg.gg/wanset
FOLLOW US
---------------------------------------------------
Twitter: / linustech
Facebook: / linustech
Instagram: / linustech
TikTok: / linustech
Twitch: / linustech
MUSIC CREDIT
---------------------------------------------------
Intro: Laszlo - Supernova
Video Link: • [Electro] - Laszlo - S...
iTunes Download Link: itunes.apple.com/us/album/sup...
Artist Link: / laszlomusic
Outro: Approaching Nirvana - Sugar High
Video Link: • Sugar High - Approachi...
Listen on Spotify: spoti.fi/UxWkUw
Artist Link: / approachingnirvana
Intro animation by MBarek Abdelwassaa / mbarek_abdel
Monitor And Keyboard by vadimmihalkevich / CC BY 4.0 geni.us/PgGWp
Mechanical RGB Keyboard by BigBrotherECE / CC BY 4.0 geni.us/mj6pHk4
Mouse Gamer free Model By Oscar Creativo / CC BY 4.0 geni.us/Ps3XfE
CHAPTERS
---------------------------------------------------
0:00 Intro
1:20 Is it REALLY that dangerous?
2:32 You wouldn't download a car
4:23 RFID
6:06 NFC
7:30 BadUSB
8:44 GPIO
9:40 Final Thoughts

Пікірлер: 4 400
@LinusTechTips
@LinusTechTips Жыл бұрын
What would you use a Flipper Zero for? Nothing nefarious we hope… Check out the Flipper Zero here: lmg.gg/DK9yf Sanpopo NFC Tags: geni.us/3qJ4A Purchases made through some store links may provide some compensation to Linus Media Group.
@renderedpixels4300
@renderedpixels4300 Жыл бұрын
Too expensive for $50, if that worth of electornics. Id much rather try making my own
@Nabee_H
@Nabee_H Жыл бұрын
Would rather try making my own as well, wouldn't wanna be a "kiddie scraper" (or the hardware equivalent to one i guess?)
@hugdotnet
@hugdotnet Жыл бұрын
@@renderedpixels4300 You're not paying for just the hardware. You're paying for the software and future updates.
@reboot0000
@reboot0000 Жыл бұрын
HackRF One has existed for around 9 years and is more capable.
@itskdog
@itskdog Жыл бұрын
​@@renderedpixels4300 that's the point though. There's not really anything new here, it's just much more accessible for someone getting into security research and helping demonstrate security problems to bosses to get them to actually provide funding to beef up a company's security.
@b4ttlemast0r
@b4ttlemast0r Жыл бұрын
If some kid can breach your security with this thing, actual hackers have probably been able to do that for years without you noticing. This just shows that these systems were insecure in the first place.
@cridus_
@cridus_ Жыл бұрын
lol your comment got copied by a bot account with a sexy lady in the avatar to bait people. edit: the bot's copied comment has probably been deleted, by now.
@volvo09
@volvo09 Жыл бұрын
Yep, or you've been lucky and no one has bothered to.
@xXYannuschXx
@xXYannuschXx Жыл бұрын
Eyup and somehow the "solution" is banning these devices instead of fixing these security holes.
@randxalthor
@randxalthor Жыл бұрын
Security through obscurity is a legitimate approach. It gets a thousand times harder when a thousand times as many attackers have access.
@fredwupkensoppel8949
@fredwupkensoppel8949 Жыл бұрын
Somehow reminds me of Snowden. He exposed malpractice, yet HE is the one the public sees as a traitor, not the people behind PRISM. It's the old "smelt it vs dealt it" story.
@broski7792
@broski7792 Жыл бұрын
In my college, there's a management company in charge of the building that won't allow students to open lab rooms with their student cards. The college themselves want us to have access, but can't because of this management company, so normally to get into labs, students ask a nearby lecturer to open it for them. My friend somehow managed to clone a staff keycard to his phone and was able to open lab rooms when theres no lecturers around.
@ccibinel
@ccibinel Жыл бұрын
Sounds like that management company should be fired. If the college wants people to have access and they refuse to facilitate it they are not doing their job.
@NeptuneSega
@NeptuneSega Жыл бұрын
There's more to this story I think. The "management company" has to do what the college's best interest is since they are hired for that. Maybe students abusing such privileges
@unai49999
@unai49999 Жыл бұрын
​@@NeptuneSega exactly, those nerds are labbing a little bit too much
@someonespotatohmm9513
@someonespotatohmm9513 Жыл бұрын
@@NeptuneSega If they did what was best for the college they would have security that can't be beat by a phone.
@whosle
@whosle Жыл бұрын
Had to copy an existing key to allow it to work, this flipper is the same, only the videos online show how difficult it is to use even a copied key. They call the difficulties implementing the copied key as “hacking”
@_thresh_
@_thresh_ 11 ай бұрын
That part about cars and rolling codes reminded me of this one time when me and some of my family members were in a big parking lot and when somebody unlocked the car with the remote we could hear at least 3 other cars unlock, then they locked it and all those cars that unlocked locked again. Really shows how insecure old cars are, because the car they had was from around 2005 or so
@jonathanwade8313
@jonathanwade8313 Ай бұрын
I had a late 90s Subaru that would have the alarm system set off by random car remotes. Had the alarm disconnected and when the system was triggered I had to do a little dance with the battery to reset it
@Alliat6364
@Alliat6364 Жыл бұрын
I’ve had my Flipper for many months now. It’s useful as a keychain for keyfobs and RFID cards. The IR comes in handy to control lights and other devices around the house. The Amiibo library is pretty cool but I’ve never used it. Another cool use is to check if RFID shielded wallets and bags are indeed what they claim to be. Then it’s fun for all sorts of inocent pranks such as popping Teslas (only works when the car is not running and stationary and the lid closes automatically after a couple of minutes), prematurely setting off restaurant buzzers, messing with electronic price tags in the supermarket, messing with the volume or channels on public TV displays or projectors, NFC rick rolling people’s phones (it’s just a KZbin link that auto opens and the prank is pretty ruined with ads if the victim doesn’t have Premium)… It’s a reminiscent of the old Blue Box days. Poke around and have fun! By the way, unofficial firmware allows usage of rolling codes but it also unlocks restricted frequencies. Since I work mainly around hospitals I don’t dare unleashing that monster and risking accidentally messing with someone’s pacemaker!
@Skeeeeeyeeeeee
@Skeeeeeyeeeeee Жыл бұрын
Obviously it’s pricey but to me it sounds like a neat little machine. I think I’ll buy one
@Alliat6364
@Alliat6364 Жыл бұрын
@@Skeeeeeyeeeeee Nice! I hope it will bring you as much fun as it has for me. Just note that I haven’t dared to bring it with me when travelling internationally as I’ve heard of some countries confiscating them if discovered.
@GreyGooseNWO
@GreyGooseNWO Жыл бұрын
Is it easy to learn to do all that if you have no experience?
@jakewastaken
@jakewastaken 8 ай бұрын
There’s actually a DTMF app that has Redbox and bluebox tones. I would have killed for it a few decades ago lol
@UserMax9
@UserMax9 8 ай бұрын
Seems more convenient to me to just save the RFID card in your phone
@IamJakoby
@IamJakoby Жыл бұрын
Linus actually said my name. Still so hard to wrap my head around being featured in this video And it's the 3rd time now and it still doesn't feel real. So cool to be even a small part of something like this. And I'm glad everyone has been enjoying my work
@esaedvik
@esaedvik Жыл бұрын
You also have the power to make the Flipper do sponsor segues...have at it.
@asishreddy7729
@asishreddy7729 Жыл бұрын
Good for you dude.
@FlyboyHelosim
@FlyboyHelosim Жыл бұрын
But did he pronounce it properly?
@en3525
@en3525 Жыл бұрын
What i thought of hackers: Cool, collected Hackers in real life: OMG Linus mentioned my name, this doesnt feel real . Whats next? thanking for the likes on the youtube comment lol
@koteeq
@koteeq Жыл бұрын
same bro
@lamboboySV
@lamboboySV Жыл бұрын
Probably a good time to mention that Amazon has banned the sale of this product as of today Edit: Amazon has only banned the sale of the product in the US. It seems to still be available in other countries via their website.
@kernalmustang260
@kernalmustang260 Жыл бұрын
Probably done by flipper to stop resale help reduce botted purchases.
@EbikeAdventuresSD
@EbikeAdventuresSD Жыл бұрын
Not today couple days ago
@zeroskill.
@zeroskill. Жыл бұрын
do not buy outside of joom as scam sales of these are very common
@Hojogamer
@Hojogamer Жыл бұрын
I have one 😂
@Jimmy-wj9uu
@Jimmy-wj9uu Жыл бұрын
@@kernalmustang260 not true, amazon banned the sale under the guise of it being a "hacking tool". The same reason eBay did
@KCCKirby
@KCCKirby Жыл бұрын
New Flipper Owner here. For Amiibo, you can use the creation tools for the tags and write them directly to the Flipper, as it can emulate a blank tag. This is helpful if you are looking to save on all your Animal Crossing tags and storing all the tags someplace.
@NoJumperCljps
@NoJumperCljps Жыл бұрын
What else can it do?
@fe1jx
@fe1jx 11 ай бұрын
Will this work for sky landers? 😂
@KCCKirby
@KCCKirby 11 ай бұрын
@@fe1jx Yes! If you have the ability to write them, you can add them manually as Mifare Classic 1k 4byte UID cards. Otherwise, you have the ability to read them and emulate them if you have access to physical Skylanders. Amiibo uses NTAG215, which if you pair with TagMo and the bin files, you can even write new amiibo to the Flipper.
@UserMax9
@UserMax9 8 ай бұрын
You can copy most RFID cards with your phone
@nikaman9539
@nikaman9539 7 ай бұрын
Wow
@joelrggizmo1373
@joelrggizmo1373 5 ай бұрын
I purchased my mainly for doing home theater installations. There's so many remotes that you do not know what the IR code is and that was the main reason for my purchase. Yes, I do have a lot of TV remotes, installed air-conditioning system, ceiling fans, and some other devices I've added, it has made things very convenient when I go to customers and there's an issue with the remote.
@kkpdk
@kkpdk Жыл бұрын
The Flipper zero has been excellent for demonstrating problems to management. If I demonstrate an exploit using my portable workstation and expensive SDR, no matter what I say the mental picture is that it requires expensive equipment and expertise. Instead show it with something that looks like a toy and was bought online for fun-money, and the mental picture is very different.
@alexatkin
@alexatkin Жыл бұрын
I wonder, is that perhaps exactly why they designed it to look like it does?
@DiustheZ
@DiustheZ Жыл бұрын
To get one in Australia it's like $400... By comparison a brand new PS5 is about $650.
@andreimunteanu750
@andreimunteanu750 Жыл бұрын
yeah well even 190$ aren't really fun-money for me
@skyguardian18
@skyguardian18 Жыл бұрын
@@andreimunteanu750 I mean, for bad actors 190 is a fun money as long as they can gain more from it.
@agvulpine
@agvulpine Жыл бұрын
@@alexatkin it's actually designed to look like its predecessor, which is an actual child's toy that accidentally let you open garage doors and disable alarm systems.
@ZeeengMicro
@ZeeengMicro Жыл бұрын
The amazing things about flipper zero is not just the advertised functions but the fact that they are able to pack that many functions in such a compact and neat packaging. If I were to built one myself, it would be a mainboard with wires and atennas sticking and tanggling all over the places
@megaweasel706
@megaweasel706 Жыл бұрын
I like the idea of having a multi tool like this, being able to check microchips on pets or remote control something that’s my property with one device seems great to me
@outerheaven2k7
@outerheaven2k7 6 ай бұрын
yo. This comment sold a flipper zero fr Microchips on pets, hell yes- thats so useful for idiots who cant take care of their pets. Soooo many dogs loose in my town :(
@etansivad
@etansivad Жыл бұрын
True story, I had my first date as a 40 year old. We met at a bar that had an annoying TV in the background. I pulled the flipper and used it to turn off the TVs in the bar (It was lazy thursday afternoon; no one was watching anything). Nobody clapped, but my date and I enjoyed being able to hear each other and talk uninterrupted.
@shaqvi5672
@shaqvi5672 Жыл бұрын
Thank you for sharing, hope jt went well
@caca738
@caca738 Жыл бұрын
☠️🤓 “I pulled the flipper”
@wheniztheend
@wheniztheend Жыл бұрын
*Everyone clapped.
@RoIIingStoned
@RoIIingStoned Жыл бұрын
I worked as a nurse at a super ghetto/old hospital with remotes that don’t work on crappy tvs. I wonder if this would help. That alone would be worth it as a lot of patients were disappointed they weren’t able to watch tv
@music4thedeaf
@music4thedeaf Жыл бұрын
​@RoIIingStoned it should
@JoseLgamer05
@JoseLgamer05 Жыл бұрын
This just reinforces the saying "Locks keep honest people honest, and they don't stop evil people."
@Inf1e
@Inf1e Жыл бұрын
Ah, fellow LPL subscriber here
@DahVoozel
@DahVoozel Жыл бұрын
Locks tell lazy thieves to move to the next one
@crowman6330
@crowman6330 Жыл бұрын
More of "lock is only a deterrent, not a guarantee"
@AaronShenghao
@AaronShenghao Жыл бұрын
Very tru, my bike was stolen in Sweden under a window of 2hours😢 the thief not only cut the cable lock and pried off a frame lock… probably should use a U lock instead…
@capslock4959
@capslock4959 Жыл бұрын
@@AaronShenghao or move to japan and you dont need to worry about locking up your bike lol
@arouric636
@arouric636 Жыл бұрын
I backed the Kickstarter and I'd say Linus is right on point here. What made this device so attractive to me was the fact that it's small, pocketable and all-in-one. It's a fun little toy to explore and learn about security with and encourages you to really think about wireless communication security
@annoorange123
@annoorange123 Жыл бұрын
But can i run Doom on it?
@danepher
@danepher Жыл бұрын
@@annoorange123 There is a "flipper zero edition", so in a sense you can lol
@ChristianBrugger
@ChristianBrugger Жыл бұрын
It sounds for you its an educational device, great!
@arouric636
@arouric636 Жыл бұрын
@@ChristianBrugger It's very much an educational device, but it's also very much a toy that causes my friends to give me a side eye when I take it out :3c It's quite versatile and I love to find new ways to mess around with things lol
@arouric636
@arouric636 Жыл бұрын
@@annoorange123 Yes! Yes, you can! Some version of it, anyway. It requires custom firmware last time I checked, which is easy to install
@noahstuart606
@noahstuart606 Жыл бұрын
Been playing with my flipper for about a month It’s pretty much a leatherman for computers, it is one of the best IR remotes/transmitters available but all that’s good for is turning off the TVs in Walmart, to scan cards you need to physically have the card in and touch it to the back of the devices so no one is going to be using a flipper to steal your card from 30 feet away in the mall.
@Henry-sv3wv
@Henry-sv3wv 8 ай бұрын
you can turn off tv with cheap arduino, no need for that expensive script kiddy toy to do that ...
@Robert123x
@Robert123x Жыл бұрын
Thanks for that video! Recently, I had a scary encounter with an RFID hack while traveling on a crowded subway. As someone who relies heavily on credit cards and digital payments, the thought of losing all my personal information to a stranger was terrifying. Luckily, I had invested in an AirTag wallet and was able to protect my cards from the hacker's attempts
@stevepatton9518
@stevepatton9518 Жыл бұрын
Out of curiosity, have you tried any other AirTag wallet brands besides the one you currently have? I've been researching a few different options, but I'm having trouble deciding on which one to go with since there are so many mixed reviews. If you've had experience with different brands, I'd love to hear your thoughts on which ones have worked well for you in terms of quality and security.
@Robert123x
@Robert123x Жыл бұрын
@@stevepatton9518 I've tried a few different AirTag wallet brands and I have to say that Vionentus is the best. I've been using their wallet for a year now and it still offers the same level of security and protection for my cards. Plus, it's stylish and durable. Highly recommend
@billysbigworld6166
@billysbigworld6166 Жыл бұрын
​@@stevepatton9518 Neat that we have the same last name
@r3mxd
@r3mxd Жыл бұрын
magine just using cash lmfaooo holy fucking zoomers
@gubeesha6653
@gubeesha6653 Жыл бұрын
Bots
@TheGainsWizard
@TheGainsWizard Жыл бұрын
I love the coverage of security stuff. You should do more of this kind of thing. If you really want to blow people's minds then look into physical pen testing. Door attacks, keyed alike systems, etc. It's hilarious how easy it is to just pop open pretty much any door. I guarantee almost anyone could break into nearly any building in under 5 minutes using less than $100 of kit that can easily be concealed on their person.
@sinistressdreams7243
@sinistressdreams7243 Жыл бұрын
I just want to mention LPL (LockPickingLawyer). Its absolutely ridicolous
@DiustheZ
@DiustheZ Жыл бұрын
@@sinistressdreams7243 Most pen testers use lockpicking as a last resort.
@kevinhinds1250
@kevinhinds1250 Жыл бұрын
I literally spent 5 dollars and can pop most locks on residences in the US. I can probably do it for free with a windshield wiper lol.
@Josh_Quillan
@Josh_Quillan Жыл бұрын
My wife locked us out but managed to open our door with a plastic document folder.
@darek4488
@darek4488 Жыл бұрын
@@Josh_Quillan It's only possible in USA, where the gaps around the door are open and wide. Good luck doing that in Europe.
@IronPhreak
@IronPhreak Жыл бұрын
As someone who was lucky enough to get a flipper, the uses are very interesting. I've utilised it a few times during penetration tests and was sometimes amazed by the performance. For a small, pocket sized, battery powered device, I'm not surprised this caused a stir... However, it doesn't help that so many people are making a big deal of these and showing "hacks" online that just aren't real. "Watch the flipper hack CCTV!!! Omg!!!" No Travis, you turned off the TV they're connected to, any phone with an IR blaster can do that...
@nicoper
@nicoper Жыл бұрын
Does anyone still make phones with IR blasters? I don't think I've seen one in a solid decade.
@Muhluri
@Muhluri Жыл бұрын
@@nicoper Xiaomi
@balmashev93
@balmashev93 Жыл бұрын
@@nicoper Xiaomi and this feature is reaaaly cool, especially in the hotels if they don't provide remote for their air conditioner for example
@danipoz4420
@danipoz4420 Жыл бұрын
Some Xiaomi and Huawei phones have it.
@JavoCover
@JavoCover Жыл бұрын
The are some tiny IR emmiters that plug in the 3.5mm jack
@r4z0rb4ck.
@r4z0rb4ck. Жыл бұрын
Please do more security focused videos.. I love them!
@nekdo_kavc
@nekdo_kavc 2 ай бұрын
Like LTT knows anything about security 😂
@brendancloonan1860
@brendancloonan1860 Жыл бұрын
I just recently got a flipper zero and i live using it as a universal remote for all my TVs and devices, no more searching for remotes since i copied them all into 1 device, and it will work on any new device.... made my life SOOO much easier, i also like that I can condense my amiibos into 1 device, again makes life just easier.
@BlackEagle478
@BlackEagle478 Жыл бұрын
It isn't just the ingenuity of the community, is the relaxed cybersecurity standards society has accepted.
@bootmanbill2362
@bootmanbill2362 Жыл бұрын
I think that acceptance has come from general ignorance surrounding how any piece of technology works. Especially stuff like rfid
@dsvechnikov
@dsvechnikov Жыл бұрын
In a perfect world there wouldn't be need for any security and all that computational power, all that silicon that does encryption could do something more useful... Just think about it. We spend trillions of dollars and gigawatts of energy just to make sure that some asshole won't ruin someone's day by turning something awesome into a weapon. And despite all efforts, all resources spent on defences and security, those assholes still do their things all the time all over the world. That's depressing. But why assholes do what they do? Maybe we should find out and spend resources to fix that instead of putting even more defences and security everywhere? I don't know... It's just hard to want to live in this world sometimes...
@luigifan4585
@luigifan4585 Жыл бұрын
@dsvechnikov Doing stuff like this simply stems from only being able to gain personal satisfaction through screwing other people over. They can't be reasoned or bargained with. "Some people just want to watch the world burn."
@TheDisturbed0ne1
@TheDisturbed0ne1 Жыл бұрын
I was invited to a high school as a guest to go through a few cyber security does and don'ts, and the amount of people, both teachers and kids, who had no idea what threats are out there were scary. During the first two hours, I had people who connected their phones to my WiFi pineapple without second guessing. And these are kids and teachers in tech!
@arnox4554
@arnox4554 Жыл бұрын
Also, a whole bunch of, "Why you worried about privacy, bro??? Nothing's gonna happen, bro. You're just being paranoid, bro."
@lmarquis518
@lmarquis518 Жыл бұрын
I have had one for 4 months now. It’s a daily tool, all my keys and remotes are saved to it along with keyboard macros I use daily through the BadUSB feature. No more 10 RFID tags I have to keep track of and I finally have universal control of all my LEDs, TVs, and soundbars
@connor7439
@connor7439 Жыл бұрын
Did you just record the IR remote signals using the flipper for LEDs?
@LizardVideoDude
@LizardVideoDude Жыл бұрын
When Linus said it could do IR, I immediately also thought of using it for a universal remote!
@skateboardrll2
@skateboardrll2 Жыл бұрын
@@LizardVideoDude it’s Incredibly easy to make custom remotes in it I’ve been loving mine too. Garage opener too which is subghtz
@fck00_
@fck00_ Жыл бұрын
@@connor7439 you can even brute force them without knowing any information about the device
@aprilgeneric8027
@aprilgeneric8027 Жыл бұрын
and traffic lights, lol
@kentharris7427
@kentharris7427 15 күн бұрын
An apartment gate opener runs on 318 MHz with only 512 different code combinations. It took me only 5 minutes to figure out the gate code was the building number plus the apartment number converted to binary. I purchased the gate opener that had dip switches to making programming easier. Don't know why younger people want to create havoc once hacked in. Me personally wouldn't want anyone to know I was there.
@flyicestormpluto
@flyicestormpluto Жыл бұрын
Thank you Linus for clearing the purpose and positioning of the Flipper Zero up
@raptorjesus3894
@raptorjesus3894 Жыл бұрын
This thing is the bane of my existence at work. Not because I deal with products vulnerable to it or anything like that, no, my problem with it is it has people scared, so everyone is asking for sleeves or covers for their car keys to block it, they then get mad when I try to explain that they don't need it, and in fact do not WANT a cover to block signals from their keys, because then their cars won't start...
@Cryo_Gen
@Cryo_Gen Жыл бұрын
It's the opposite for me. I use it to manage all of our ir remotes, rfid systems, and nfc systems. Really useful for the rest of the IT dpt
@approxahmed
@approxahmed Жыл бұрын
9:49 "...and then, this is the really shocking part, delivered fully on its promises." love the subtle stab at some crowdfunding campaigns
@ZachStein
@ZachStein Жыл бұрын
I think what's cool about the flipper zero is the fact that it's so accessible. You're absolutely right that you could make one of these with an arduino easily enough, I could make one as an experienced developer and electronics tinkerer, but I don't think I would take the time to make one because I'm not motivated enough to do so. On the other hand, I'd definitely buy one of these things.
@aoyuki1409
@aoyuki1409 Жыл бұрын
its like a Swiss knife of electronics. Yeah it has many tools and easily accessible but it'll never be as potent as a proper tool designed for a specific task. if your devices are vulnerable to Flipper Zero, then the security risk is that your security is too damn weak and horrible that a limited functionality device can open it. trying to say Flipper Zero is a hazard is like trying to say rocks are a hazard because it can open a lock. the rock is not the problem, the lock is.
@agvulpine
@agvulpine Жыл бұрын
I wish this video had mentioned the actual child's toy that inspired the Flipper Zero. I already forget its name, but the toy accidentally allowed you to open garage doors and disable alarm systems. So this thing got kickstarted to make a legit cutesy hacking tool.
@space_ship643
@space_ship643 Жыл бұрын
Tomogotchi
@okk2094
@okk2094 Жыл бұрын
Tamagotchi, there's been a similar device before the Flipper. The Pwnagotchi.
@fss1704
@fss1704 Жыл бұрын
Nah, it was some mattel toy that had an RF transceiver.
@Straithe
@Straithe Жыл бұрын
I think you are referring to the IM-ME.
@fss1704
@fss1704 Жыл бұрын
@@Straithe Yeah, the IM-ME, samy is a golden boy.
@mihaigheorghe467
@mihaigheorghe467 Жыл бұрын
This gives me an insight into how cool it would be for LTT to have a dedicated CyberSecurity channel
@nicoper
@nicoper Жыл бұрын
that's probably way too small of a market for them, and there are already plenty of other channels in that niche
@esaedvik
@esaedvik Жыл бұрын
That's pretty much what Hak5 have been doing for almost 20 years at this point.
@johnnypopstar
@johnnypopstar Жыл бұрын
Hosted by SwiftOnSecurity!
@Kilmar4999
@Kilmar4999 Жыл бұрын
Very good idea
@kautzz
@kautzz Жыл бұрын
please don't
@VereMyth
@VereMyth Жыл бұрын
I work in IT and the only thing I have used this 170$ toy for is infrared...Projectors, TVs, Etc, Its a really nice place for me to store all the remotes that could lost in one place..I have over all around 200+ different TVs saved due to how often we cycle through brands/models/etc.
@Nathan69
@Nathan69 Жыл бұрын
About time Linus iv been waiting for you guys to do a video on the flipper had mine for 3 months now and have no clue how to use it
@sakaraist
@sakaraist Жыл бұрын
I'm all for things like this being on the market. Almost every company has gotten negligently complacent with security implementations. Launching products that had literally no pentesting done.
@the_undead
@the_undead Жыл бұрын
You say this like it's a new thing
@C0yf1sh
@C0yf1sh Жыл бұрын
Yea but i don’t really like the idea of a 14 year old stealing my credit card info, or my car just from beeping the thing at me…
@Zero.0ne.
@Zero.0ne. Жыл бұрын
I agree. The virality of flipper should only increase cryptographic security in the long run.
@the_undead
@the_undead Жыл бұрын
@@C0yf1sh if you don't like it then don't sit here and let it happen to take precautions to prevent it
@C0yf1sh
@C0yf1sh Жыл бұрын
@@the_undead oh i agree, it just seems odd that these things are allowed to be sold so easily, like on websites as big and well-known as Stock-X.
@witchy90210
@witchy90210 Жыл бұрын
"Is the hysteria simply a kneejerk reaction from the uninformed" 98% of the time, yes.
@angelblue1527
@angelblue1527 Жыл бұрын
Yep. People don't like to research... Or Read.. People ask when a place close when there's a scheduled right on the door.....
@volvo09
@volvo09 Жыл бұрын
It's a symptom of piss poor media. They reach for hysteria, and get people wanting action from the authorities instead of educating people.
@roejogan292
@roejogan292 Жыл бұрын
Yes, this goes for many things (anti gun, anti vaxxers, etc) The individuals with the least knowledge on a topic are generally the one's with the strongest opinions against them.
@Monitice
@Monitice Жыл бұрын
@@angelblue1527 I don't think you're literate either.
@FlyboyHelosim
@FlyboyHelosim Жыл бұрын
Covid in a nutshell.
@gaborbenyei333
@gaborbenyei333 Жыл бұрын
I was waiting for a day to come when a few university students take a little freetime to get this thing together and make a product out of it. This could have happened years ago, but there we have it finally.
@emmiemoore
@emmiemoore 7 ай бұрын
Hi this is the first video I’ve seen in a while from this channel and it’s still as good as it was in December
@Lucifuh
@Lucifuh Жыл бұрын
been waiting for this since u mentioned it on WAN show, tried to get one myself to mess with but couldnt find any that ship to the UK
@kingzach74
@kingzach74 Жыл бұрын
eBay UK maybe? I see a bunch of listings on there.
@Lucifuh
@Lucifuh Жыл бұрын
@@kingzach74 might be a good shout that i'll have a look ty
@OfficialFBI
@OfficialFBI Жыл бұрын
Lab401 and Joom are both official outlets for the Flipper that ship to the UK. I would recommend going with Lab401. Joom is in China and costs a bit more, its where I got mine though as Lab401 was always out of stock. Took forever to arrive. Lab401 is in Europe, much faster shipping, slightly cheaper too.
@UrbExGear
@UrbExGear Жыл бұрын
Loads of them on ebay for around 250£
@Synclon
@Synclon Жыл бұрын
I bought it on Ebay Since LAST year, I don't know Is Expensive now due to it sold Out on The Flipper Zero Store
@KerbalRocketry
@KerbalRocketry Жыл бұрын
a good example of why security by obscurity is never a good approach, it only takes one new device like this to show the flaws
@xtreemgamer129
@xtreemgamer129 Жыл бұрын
@@LoveStrangeDr theyre basically security by inconvenience... the only people thwarted by them are people who dont want to put any effort into the attempt. anyone who actually wants in can do it.
@pipthewarrior3738
@pipthewarrior3738 Жыл бұрын
@Andrew Perfect security does exist it's called 10-inch steel walls and a door with an airlock and DNA tester, retinal recognition, facial recognition, fingerprint, ear print, toe print, hair print, fingernail thickness, body weight, recorded attire when leaving and entering, password, physical key, remote physical key, camera verification from an alternative human, height check, and internal locks that you enable when inside.
@TheGoku1419Z
@TheGoku1419Z Жыл бұрын
@@pipthewarrior3738 nuke
@-Believeinyourself-
@-Believeinyourself- Жыл бұрын
@@pipthewarrior3738and what happens when an emp goes off and someone uses 420 pounds of dynamite with a 69 foot wick
@absyusuf4932
@absyusuf4932 11 ай бұрын
@@pipthewarrior3738 looool
@summitsecuritydoorandlock
@summitsecuritydoorandlock Жыл бұрын
"Sniffers" are old tech car key makers have used for certain chryslers for several years. I have a friend that built one in a dewalt case. Added level of encryption are standard for most access control systems worth their price.
@dnkys
@dnkys Жыл бұрын
There’s actually a stupidly easy fix around the rolling codes thing. The codes are only deauthenticated if the transmitter is in range. So you take your car key out of range of the car, take your flipper, hit unlock on the car key whilst reading on the flipper. That’s is now a valid and unused code. Save that, make another read, hit unlock again, do this 3-4 times and you have 3-4 unused codes ready to hit transmit near the car and unlock it.
@Sphyxx
@Sphyxx Жыл бұрын
I got a Flipper Zero to study the world of pentesting and its amazing I do admit on the first week of owning it I was being a bit rude with it turning TVs off in the mall but its surprising how many yes answers I've gotten from store managers to play around with it.
@Dimlutube
@Dimlutube Жыл бұрын
Linus brings up some good points, but there is one that I want to bring attention to... the remote capabilities. He mentions that Flipper's ability to control remotely sets it aside from other security tools... However, you can actually control the majority of the other security tools mentioned remotely as well. Some, like the Malduino W, have the functionality built in. Others require a little bit of electronics know-how to tie in an ESP32 or similar. I appreciate that Linus brought attention to the fact that this tool really does nothing better than the other tools and just gives you a nice little package for them all. I just wanted to make that distinction about the wireless capabilities. Flipper isn't some crazy criminal tool. It's like a computer. I can use my computer to hack, but it's just a tool. If people want to ban the Flipper, they may as well ban computers too. I was one of the early adopters of the Flipper Zero. I'm also in InfoSec. I say that to lend a little credibility to my argument that it's just a toy. I'm sorry to say this, but it really is. It's a neat toy. It's fun to clone an RFID card and make your friends think you're "hacking" the office/hotel card reader or show someone their credit card number (but as Linus said, no other identifiable data)... and mouse-jacking is legit fun, but it's hit or miss as it doesn't work on all mice... but it's nothing special. Most of the time I just use mine as a convenient 3v and 5v pin for electronics projects ¯\_(ツ)_/¯
@mr.adamson8675
@mr.adamson8675 Жыл бұрын
maybe in your hands it is a toy. But even someone playing around with this stuff in the wrong context can be extremely dangerous. Think about if someone wanted to kill you and they were able to get through your apartments security like it was nothing.
@rsman23
@rsman23 Жыл бұрын
​​@@mr.adamson8675 my guy, if somebody wanted you dead you think a door or window will stop them? A fking rock or fist is dangerous too, reality is not a movie.
@Aliyah_666
@Aliyah_666 Жыл бұрын
​@@mr.adamson8675 You telling me you only use a lock that relies on electronics. Kinda dumb of anyone to only trust smart locks.
@seraphina985
@seraphina985 Жыл бұрын
I've actually used mine several times during security audits for clients when I discovered using better tools they might actually be vulnerable to such a low effort attack device. Granted this was an unnecessary step, I could have simply noted the issue in my report and left it at that but highlighting just how trivial it is with a cheap tool like this sometimes helped with penetrating the skull of the client with the information of how exposed they were.
@mr.adamson8675
@mr.adamson8675 Жыл бұрын
@@Aliyah_666 I mean like to get thru a gate
@ItsClodsire
@ItsClodsire 11 ай бұрын
Man Idc how secure your network is, if someone wants to get you and they know what they are doing, your got.
@themattrixrevolution
@themattrixrevolution Жыл бұрын
Finally Linus is getting into cyber security. In this case physical security.
@benbionic
@benbionic Жыл бұрын
I have a flipper and mostly use it as a backup for my RFID access cards just in case I lose or break one of the originals. It's a really useful tool to have quick access too.
@nicoper
@nicoper Жыл бұрын
@@harmonic5107 Yeah, I backed the Kickstarter and have had mine for almost a year. It's a very neat multitool, but I also know that I could easily replicate any one of its features with much cheaper hardware, most of which I probably have lying around somewhere. It's excellent that it's opening regular people's eyes up to basic security flaws, though. Hopefully the end result will be shunning of bad practices and an overall improvement of security instead of everyone putting their heads in the sand and attempting to ban the sale of similar devices.
@maxluthor6800
@maxluthor6800 Жыл бұрын
Might as well throw away those locks if anyone can duplicate the keys
@grn1
@grn1 Жыл бұрын
@@nicoper Unfortunately in our highly corporate world it's almost certainly going to be the latter option. Why fix it when you can pretend it isn't an issue and lobby (pronounced pay) congress to ban the sale of these 'scary' devices.
@b7a1r3
@b7a1r3 Жыл бұрын
The flipper is a multitool, and just like a regular multitool, it's up to the user to not do stupid stuff with it. The multitool I carry has a knife on it, but as a user, I know that's for opening boxes or (what I usually use it for) cleaning under my nails, not for stabbing people. COULD the knife hurt someone if stabbed? Of course, but it's the user's responsibility to know what is the right and wrong way to use it. Edit: the kickstarter page even describes it as "Flipper Zero: the multitool for hackers"
@fateunleashed9680
@fateunleashed9680 Жыл бұрын
You make it seem like hacking is universally bad, when only black hat style hacking is bad.
@loganawe
@loganawe Жыл бұрын
​​@@fateunleashed9680 really all hacking should be considered bad in an ideal world, it's only because of the especially evil hackers that we need white hats, nobody appreciates being hacked, even if it's a warning/wakeup call and they "promise" to not do anything nefarious, admittedly when contracted out to test a parties security it's somewhat more reasonable, however, there's so much wasted time, and evils disguised as good, just to fight off greater evils it pains me, I'd rather people invest their energy in constructive or creative avenues. When it comes down to it, a soldier still kills, regardless of its legality or morality I wish to live in a world without slaughter.
@ManamaEd
@ManamaEd Жыл бұрын
@@fateunleashed9680 What does black hat style hacking mean lmao
@YourPalQWERTY
@YourPalQWERTY Жыл бұрын
@@ManamaEd hacking to steal things that are valuable in example, personal information, passwords, etc.
@ManamaEd
@ManamaEd Жыл бұрын
@@YourPalQWERTY Never heard of the term
@Paroissien
@Paroissien 14 сағат бұрын
4:53 "The flipper zero isn't doing anything other than alerting us to the availability of these tools" ... lol... I'm grateful for you technical accuracy, as for ethics no one requires you to hit a target.
@Georgiaguntraining
@Georgiaguntraining Жыл бұрын
Freaking excellent review. Great research and presentation, thank you.
@HaydenX
@HaydenX Жыл бұрын
I hadn't heard about this device until now. My first thought was about how useful this thing could be in controlling some older devices remotely that I've long since lost the remote for (or for which, the remote broke)...then I saw that it's $170 and fell back down to Earth.
Жыл бұрын
Or if you want to go digital and be able to control multiple devices, say in your living room, you can get something like Broadlink RM Mini, which connects to your wifi, you leave it plugged in and then you can control all your devices through the app on your phone or Home Assistant for example. I only have one and I have a few macros to control my lights, TV, soundbar, audio receiver and fume hood.
@3nron
@3nron Жыл бұрын
​@ Just have in mind that new devices can have 2.4 GHz, and broadlink have 433mhz.
Жыл бұрын
@@3nron Right, I was talking mainly about the IR. The RM Mini doesn't even have RF, you would have to go with the RM Pro. Most of the cheapo remotes for plugs, light, etc have 433MHz. With 2.4GHz it gets more complicated, because it can be proprietary, BT, Zigbee, etc..
@3nron
@3nron Жыл бұрын
@ i just find out that my led stripes has 2.4 so it's not exclusively for advanced devices. Buf for ir and 433 it's great and very cheap tool.
@satibel
@satibel Жыл бұрын
you can get fairly inexpensive universal remotes for that purpose, and a lot of them allow finding the model from a list, basically you press the on button till your device turns on then you press a number till it registers and usually you've got the correct model. the psp 1000 is also a pretty good remote. some phones have an ir transmitter so you can use them as a remote. then there's also radio remotes, but they aren't that common. a good universal remote which can get updated profiles is probably the best option for ir.
@DamienLee69
@DamienLee69 Жыл бұрын
I feel like a follow up video focusing on how to step up and test your security against such things is in order, if possible.
@sensorer
@sensorer Жыл бұрын
Putting security vulnerabilities of yours(even if fixed) on video is probably a bad idea. One of the things that certainly helps you stay secure is not sharing information about infrastructure you use. Security through obscurity is not good on its own, but in combination with other good practices it certainly helps to dodge some bullets
@DamienLee69
@DamienLee69 Жыл бұрын
@@sensorer Good point, but there could be some general ideas to pass on, resources, what you should be looking for to help secure things. Maybe a tip or idea to help the lady with a stalker that potentially could hurt her. Although she probably is not watching LTT. Lol. But maybe her brother does our something. I dunno, still think there's some info that could be passed along without compromise.
@MrNoisyGaming
@MrNoisyGaming Жыл бұрын
You should do more about the Mayhem hat I would love to see the potential uses you could find using it!
@ProPotato
@ProPotato Жыл бұрын
Back in the day when the Sony Ericsson phone was around, there was a tool you could get and put on the phone that used Bluetooth to connect to any nearby phone with Bluetooth and access everything on the connected phone without the other user being aware. You could make calls through their phone to yours (using their mobile plan), send yourself phone credit from theirs, access photos etc. It was like their phone was on your phone. It'd even bypass the pin code and go straight to the phones data. I don't remember the name of the tool, too long ago. But I didn't believe it until a friend put it on my phone and showed me how easy it was to access someone's phone.
@antibrevity
@antibrevity Жыл бұрын
Rolling codes have been legally required for some products since the mid-1990's, so it's really hard to sympathize with manufacturers that don't use them and I'm definitely looking at Honda at this moment.
@bluie6578
@bluie6578 Жыл бұрын
Btw if you use unofficial firmware for flipper (unleashed, xtreme etc.) it has support for rolling codes and blocked signals
@felinaoreite
@felinaoreite 11 ай бұрын
Yes it's annoying, my parents neighbors open my car doors with it, hack into our home cameras, you name it.
@felinaoreite
@felinaoreite 11 ай бұрын
I don't have money for a new car, they probably found a way to use it on her credit card numbers she screams over the phone also
@RocketRoosterFilms
@RocketRoosterFilms Жыл бұрын
I am over the moon glad that I live in a time where I can genuinely say "Flipper can not hold a candle to the might of the Rubber Ducky."
@Fvck_Y0u_Sad1Q_K
@Fvck_Y0u_Sad1Q_K 9 ай бұрын
As a near novice to Cyber security and coding I just got one to get into things. It's definitely a must have for beginners. I'm shocked at just how easily today's IOT consumer products can be manipulated and hacked.
@hackerx7329
@hackerx7329 Жыл бұрын
The Hack RF doesn't do anything by itself. It is a radio transciever. You need antennas that are tuned for the frequencies you want to use it on, a computer to connect it to, software to use with it, and a willingness to learn. The same is true of all SDRs save for a few special cases like a ADLAM Pluto which does have an embeded computer running Linux and can be powered standalone and could do something by itself if you loaded it with scriptable software and wrote scripts to autostart when you plugged it in and then had it auto save results.
@dgsprysoup
@dgsprysoup Жыл бұрын
Linus getting prepared to hack the hackers who took down his channel
@henryalamillo8312
@henryalamillo8312 Жыл бұрын
Hackwars, Linus Media Group Strikes Back
@BlackManOnAShortBus
@BlackManOnAShortBus Жыл бұрын
He is not that good. I remember his forum got hacked and my password got leaked. I started getting tons of spam emails and phishing emails. Lol
@engineeingnerd
@engineeingnerd Жыл бұрын
@@BlackManOnAShortBus u got that? but i didnt
@AltonV
@AltonV Жыл бұрын
@@BlackManOnAShortBus he could hire hackers to do it for him. Also you getting spam emails isn't due to your password leaked, it's that the email address leaked.
@elijackson7402
@elijackson7402 Жыл бұрын
I'm glad you did a review on the flipper zero I was quite interested in this and didn't quite understand it.
@Lionking-lb5gw
@Lionking-lb5gw Жыл бұрын
I think the problem here to note is how easily it can be used i think. If you use an arduino , you should know how to code or atleast look for the required code in github , and copy it and other stuff. But here , if someone feels even a little angry against someone and he knows about flipper, he will just buy it , on the other hand if he had to learn coding or learn about github , ardiuno setting and other stuff, he might not do it as he is not that angry to do that much effort. Another example is. if someone wants to do something bad and has a sudden impulse he might not take the effort to learn to code , github , etc just use flipper. Im not sure if its a proper linking but i think this is really similar to how a real gun can be printed from a 3d printer. Basically its bad since it is more accessible.
@burningglory2373
@burningglory2373 Жыл бұрын
On WAN show Linus and Luke also discussed it best feature - using ems frequencies to turn red lights green.
@krisclem8290
@krisclem8290 Жыл бұрын
Linus: "What it can't do is segue to our sponsor" Hackers: "Challenge accepted."
@helloukw
@helloukw Жыл бұрын
Your hacker sounds like Barney Stinson.
@himselfe
@himselfe Жыл бұрын
@@helloukw I was thinking more along the lines of Barney the Dinosaur
@AdamHH11
@AdamHH11 Жыл бұрын
Today I learned it's segue and not segway
@iamyourgreatgreatgreatgrea6291
@iamyourgreatgreatgreatgrea6291 Жыл бұрын
@@AdamHH11 Oh damn, same here...but I'm gonna blame the fact that English isn't my native language. 😆
@GetawayFilms
@GetawayFilms Жыл бұрын
He did say "yet" in that misquoted sentence 11:12
@Biodune
@Biodune Жыл бұрын
This thing is great to travel with. Many hotels block being able to switch inputs on the tv. This is the easiest universal remote to restore functionality.
@jimfisher9749
@jimfisher9749 Жыл бұрын
I remember back in the early 2000's i was in a gags and gifts store....I came across this little key chain device that could turn tvs on and off....Never have i imagined how much fun such a little device was back then 😆😆
@websterleone
@websterleone Жыл бұрын
I considered getting one of these when it was buzzing around Twitter but I've got so many microcontroller dev kits I didn't have enough use for wireless to buy it. But I did say I'd buy one if they made it in atomic purple (still waiting on that...)
@alcho2024
@alcho2024 Жыл бұрын
The way I see it, yes you can individually buy devices that do the same things as the zero, however, you will end up with a lot more tech to carry around and at that point and will probably have spent more too. With the zero, you can put it in your pocket and you get a cute dolphin :)
@arnox4554
@arnox4554 Жыл бұрын
It is a very cute dolphin. Let's be honest here.
@xfy123
@xfy123 Жыл бұрын
You can just get a custom board made for like 5$ and solder all the components yourself and it's probably gonna be cheaper and arrive faster then the flipper
@petrikillos
@petrikillos Жыл бұрын
@@xfy123 Does it have a cute dolphin tho? Thought so; check mate 😎😎😎
@Vysair
@Vysair Жыл бұрын
@@xfy123 we love the cute ui and mascot
@john_in_phoenix
@john_in_phoenix Жыл бұрын
It capitalizes on the "security through obscurity" loophole. As you pointed out, NFC payments are actually more secure than most other methods. I need to get one, it should make it easy to figure out the bluetooth communication command/response for some BMS models that I use. I wish I could find some Raspberry Pi zero 2 w to buy for less than 8 times list price. Sigh.
@memes_gbc674
@memes_gbc674 Жыл бұрын
it doesnt actually have bluetooth hacking capability yet
@SealFormulaMaster
@SealFormulaMaster Жыл бұрын
While NFC payments are more secure, it's only a matter of time. Scammers go where ever the suckers are, and if there are a ton of suckers using NFC payment, they'll start to hack these systems to get at your money. It's true for everything. Windows 11 was only secure at launch because it was a new system. Linux is only secure because it's not accepted everywhere yet.
@sagnikdas6049
@sagnikdas6049 3 ай бұрын
Well now we know that the Canadian Government isn't subscribed to LTT
@ThatJay283
@ThatJay283 Жыл бұрын
the risk of echoing stuff could be removed with any kind of challenge based secret key handshake. eg: 1. key asks for challenge 2. car sends back a random seed 3. key hashes the seed with the secret key and sends it back to the car 4. the car verifies that the keys hash matches the cars hash and of course, each challenge would be time limited (eg 100ms), so nobody can just catch the challenge result while stopping the car from getting it and using it later.
@Rightly_Divided
@Rightly_Divided Жыл бұрын
Do you suppose there is any kind of master code used by the manufacture that we do not know about? Or is that even a thing. I have not researched too much on rolling codes.
@Arceus3251
@Arceus3251 Жыл бұрын
The USB-UART bridge on the flipper is super nice for debugging hardware, never realized how much control I could get from 4 little pins
@pniehusde
@pniehusde Жыл бұрын
I like this nuanced take, much better than most of the sensational coverage that demonized this. Edit: I totally confused amoral and immoral. Meaning I fully agree with this take. Thank you for pointing that out @SirVer Old text, so that the comments still make sense: But I would like to point out that the HackRF is not amoral, it has very legitimate use cases in some specialized industries that deal with high frequency rf signals.
@ViridianFlow
@ViridianFlow Жыл бұрын
Sure but it's like how cracking a console to install homebrew isn't in itself amoral because you could legitimately be doing it to install homebrew apps that are fine and legal, but let's face it, 99% of the time people do it so they can illegally pirate stuff. If the main use is immoral then it doesn't really matter about the tiny percentage of people who don't abuse it.
@eddapultstab2078
@eddapultstab2078 Жыл бұрын
I have heard of security professionals who use it to sniff out antiquated security devices. For that the flipper makes alot of sense as companies shouldn't leave obvious vulnerabilities to lay around.
@danepher
@danepher Жыл бұрын
What @Verdan Koro said
@3nertia
@3nertia Жыл бұрын
A HackRF would be lovely for experimentation and learning - if they weren't so expensive
@3nertia
@3nertia Жыл бұрын
@@ViridianFlow It's not really amoral when the majority of people just want KZbin without all the ads :p
@stvargas69
@stvargas69 Жыл бұрын
Thank you for pointing out the fact that its not the tool. But the tool user. A knife can feed you or kill you. Its you who controls it. Im not tech savy but bought one to learn. Thats why Im here. Cheers
@MikkoRantalainen
@MikkoRantalainen Жыл бұрын
9:15 The important thing to understand is that any wireless keyboard you have that doesn't do real encryption is a security hole waiting to be exploited. The Logitech unified/universal wireless dongle is one known-problematic product. The correct way to fix the issue is to fix the protocol, not to try to prevent software defined radio (SDR) devices.
@spdcrzy
@spdcrzy Жыл бұрын
I can see this being VERY useful for field engineers that need to test unknown environments. That Geiger counter is so cool!
@andyk939
@andyk939 Жыл бұрын
I've used on to check specific RF frequencies on a certain band in a casino, so I could assure the control signal of my drone was safe for a commercial shoot. Not sure there is another device as cheap that can signal monitor.
@crazycoffee
@crazycoffee Жыл бұрын
My last job at a car shop my buddy had one of these who used it to diagnose computer and electronic issues
@myname-mz3lo
@myname-mz3lo Жыл бұрын
ethical hackers also use them . people who think hacker = bad dont understand that their security relies on ethical hackers
@whogivesadamnforuser
@whogivesadamnforuser Жыл бұрын
You can buy a Geiger counter for less than 80$ tho lol
@benmoore2684
@benmoore2684 Жыл бұрын
This is like watching a scripted version of a WAN Show segments. I like it. Thanks for sharing the information outside of the marathon that the WAN show is becoming!
@cathevans9859
@cathevans9859 Жыл бұрын
I didn't think they woul break the five hour run time....wonder how long until six hours...
@grn1
@grn1 Жыл бұрын
@@cathevans9859 I've watched the first two hours so far. Hopefully we get some good weather and I can watch the rest while taking walks.
@RandomMan1
@RandomMan1 Жыл бұрын
HackRF wasn't first demoed at Defcon, it was Toorcon 2012. Mike gave everyone in attendance one.
@quint2568
@quint2568 Жыл бұрын
as someone with an NFC implant the flipper zero does the same thing that my phone does when i write to it. had a science professor freak out that nfc is ruined security wise because of it
@DaneH64
@DaneH64 Жыл бұрын
Got one a few months ago, have it and love it ☺️ have tried the garage doors and rfids, but mostly just use it as a universal remote for my TV's and sound systems
@AugustERaven
@AugustERaven Жыл бұрын
I carry one in my purse, it’s kept me from being locked out of my data center and building when I lost my keys, it’s a hand use especially with the IR brute forcer for getting sounds to STFU if I’m overwhelmed IRL (I was an OG backer in 2020, and I do use this for other shit too, but for day to day it comes in handy quite a bit, and a fun party trick too lol)
@maxluthor6800
@maxluthor6800 Жыл бұрын
Might as well have no keys if it’s that easy to break in
@Muhluri
@Muhluri Жыл бұрын
@@maxluthor6800 check out the lockpickinglawers. There are many physical locks that can easily be defeated. Should we start remove door locks as well?
@NeptuneSega
@NeptuneSega Жыл бұрын
@@maxluthor6800 they prob copied their cards not brut forced the lock
@AugustERaven
@AugustERaven Жыл бұрын
@@NeptuneSega This, yes. Cloned the LF RFID fob. I tested all my facilities and couldn't break in via brute force.
@plzzz
@plzzz 2 ай бұрын
I used this to turn down annoying tv in restaurants if its too loud. And turn on the AC when the restaurant is too cheap to turn it on when its 39c outside.
@hobsdigree2
@hobsdigree2 3 ай бұрын
Somewhere, there is a hacker in a dark room, wearing a Guy Fawkes mask and a hoodie with the hood up, watching this video, and laughing while techno music is playing in the background. He doesn't use his mouse, but just types, as a true hacker only needs to type a few keys to do anything, including hacking into the Pentagon's most top secret files.
@antontaylor4530
@antontaylor4530 Жыл бұрын
I remember reading about people using hidden antennas to clone RFID cards in the early 2000's using (if I remember correctly) Nokia 9000's. And car remote keys were being cloned that far back too. These vulnerabilities have been well reported for decades.
@stitchfinger7678
@stitchfinger7678 Жыл бұрын
yeah this isnt new tech its just the first device to do it all
@mateuszzimon8216
@mateuszzimon8216 Жыл бұрын
This device is just reminder u should always hardened your wireless communication, IRC u can read NFC from phones but they timeout, also modern keyless entry are using rolling codes and work bi directionally (bmw with display)
@antontaylor4530
@antontaylor4530 Жыл бұрын
@@mateuszzimon8216 The keyless entry to my building and car park are not rolling codes. I've had stuff nicked as a result. If only there was a way to get my landlord to do something about it, but they don't care. The illusion of security is more than enough for them.
@daniel-11th
@daniel-11th Жыл бұрын
Very good informative video! The only error I noticed was that passports use LF chips. They also use the HF chips, because that frequency is way better at transfering encrypted data.
@lux22g0tt.alg0
@lux22g0tt.alg0 Жыл бұрын
My apartment complex "Upgraded" our lock system a few months back. We used to have a good ol' fashioned Lock and Key. Now we have a electronic Keypad and we just type our code in to unlock the door. I'm going to buy a flipper and see if it will open the locks. If it does, I'm taking off the new shit and going back to the ol' reliable. 💯
@BlakeFox
@BlakeFox 3 ай бұрын
I bought a bag of NFC tags to attach to my storage boxes and bags. I plan on creating a simple database on my phone so I no longer have to rummage through things to find that one item. Links to photo of the container and in some cases to the items held within the storage.
@ericblenner-hassett3945
@ericblenner-hassett3945 Жыл бұрын
I am surprised it took so long for LTT to put their take on the Flipper. All these features in one way or another has been a LTT Tech tip that can be boiled down to " Change the factory settings when you get it out of the box". There are a few manufacturers of devices that LTT has pointed out that don't let end users change these settings ( and the well deserved roasting of the manufacturers ). RFID is also in your debit/bank/credit cards for tap payments, also covered by one of LTTs sponsors.... ( insert LTT Link here )...
@tabs8231
@tabs8231 Жыл бұрын
I'm thinking it took them this long to get one
@mstrickk1
@mstrickk1 Жыл бұрын
They tend to wait a while on security related news and reviews. They have a pretty big audience. If you've never seen twitch chat during WAN show go check it out. You will understand.
@Femerenden
@Femerenden Жыл бұрын
Seriously, things like Flipper Zero are going to rock the boat too much, not because they are illegal or insidious or can be used by bad actors, it is because they are a threat to the "industry standard", which at this point is practically the "maximum keywords with minimum effort".
@orbalicious20
@orbalicious20 9 ай бұрын
Awesome comment :)
@GenesisXtr3me
@GenesisXtr3me 4 ай бұрын
And here we are now. Me knowing about flipper zeros for years and still, nobody, barely knowing what they are. Not enough people care. Let their stuff become stolen,
@michaelhanson5773
@michaelhanson5773 Жыл бұрын
the thing is, some places in the US have laws that require that the gas pumps honor the prices on the signs if they are lower than that at the pump. My state has such laws. So if someone changed the prices on the sign to be 1.999 per gallon, the gas station would be screwed and have to honor that until they can get the sign fixed... yeah, that would only take a little bit since someone would complain that the pump is saying 4.00 per gallon but still it would be a headache for them at the very least. Also, with tap to pay Credit Cards, i have yet to be anywhere that when i tap to pay, they require any additional info like the CVV or Zipcode so it would seem if they can clone the NFC of a credit card they can just go on a spending spree at most places.
@creationsmaxo
@creationsmaxo Жыл бұрын
The Flipper Zero can copy and reproduce the tap-to-pay code of, at least, Master Card physical credit cards and even transfer it to a blank card (and that blank card becomes a copy of your card). This has happened to me in Summer 2022 before I started using a proper protected card case while moving around a large event where lots of people were close to each other. About 2 hours after the event, someone was using my credit card tap-to-pay function in gas stations across the town to buy lottery, cigarettes and fuel. About 2-3 hours later, I got a call from the Master Card division of my Bank to confirm if I did the purchase or not and got my Master Card replaced. Then I sent the transactions information to the gas station chain with dates/hours, value on the sales and the gas station number so that they can track back the criminal. It only took 2 weeks for the police to track 2 criminals back as some of the gas station had proper working camera that could read their license plate. They were using a flipper zero and a peculiar cell app to simulate PayPass (the tap-to-pay technology around my area) with a fake tap-to-pay request signal. I'll skip over how they were able to fake the tap-to-pay request request, but it's a process except that it's a process that doesn't requires anything complicated (everything can already be found online) and can be done by anyone. I'm not blaming the device for this event as I could have protected myself with a proper card case, but it's still a shocking experience when you get a call from a bank that someone has used your CC to buy over 800$ of stuff before the card got blocked due to the red alert on unusual purchases done.
@Rightly_Divided
@Rightly_Divided Жыл бұрын
Yeah they knew what they were doing. Most people who got this device only got it because of how it was marketed. Most people would never be able to figure that out without lots of dedicated research, and most people I know who have this device definitely have no clue what any of this stuff really is when it comes to understanding all of its functions. There are people who do study it, but I am going to guess most people in the world would not know where to begin when learning how to successfully do it.
@MysticMylesZ
@MysticMylesZ Жыл бұрын
5:25 Jesus Christ that's the regular backpack not the luxury?! Nevermind, I probably won't be buying it anytime soon...
@joshuamiller8235
@joshuamiller8235 Жыл бұрын
Good luck getting one. Especially now that you are putting it out there to the mainstream. Thanks Linus. I've been refreshing that page once a day for the past 3 months trying to get one. They are ALWAYS sold out and I am NOT paying triple the retail price from a scalper.
@offswitch43
@offswitch43 Жыл бұрын
Damn you in the US? I got one the first time I heard about it. Went on their website and bought one
@ichihoe
@ichihoe Жыл бұрын
It's was available on Joom for 200, i got mine a month ago
@casey2782
@casey2782 Жыл бұрын
Yep! Love having non-professionals scooping them all up because they’re “cool”
@ichihoe
@ichihoe Жыл бұрын
@@casey2782 sorry professional 💀 , guess I'll spend my money on what you want next
@azverndias913
@azverndias913 Жыл бұрын
@@ichihoe lmaooo bro is gatekeeping a flipper zero
@Okand2
@Okand2 Жыл бұрын
When I got my flipper last autumn I immediately made a copy of my badge at work. It has been useful the few days I've forgotten it at home and you still also need to know the pin to get in anyway.
@keard558
@keard558 Жыл бұрын
What your supposed to do when you forget your badge just take the day off
@_Makanko_
@_Makanko_ Жыл бұрын
So you'll remember to bring the flipper but forget the badge?? I just ask for a temporary day badge at the lobby entrance.
@franciscomoreno9705
@franciscomoreno9705 Жыл бұрын
Flipper zero owners can now quote Linus to justify their purchase
@brando9483
@brando9483 Жыл бұрын
Funny thing is I've seen videos of people hooking them up two laptops and changing streetlights and way more than what you've covered. But yes by itself very limited but with other tools attached much more potent
@Kumodot
@Kumodot Жыл бұрын
I like Flipper Zero because it shows how easy, cheap and unsecure most of the "high-tech" stuff we see around. Lot of stuff are based on basic electronics, and as said, spending $10 you can get an arduino and a sensor/transmiter that can replicate some of those "hacks". It's very handy as a debugging tool having all this in one unit.
@felipe387
@felipe387 Жыл бұрын
yeah, id say the flipper zero would be like buying a laptop instead of creating your own pc build.
@retrorunner984
@retrorunner984 10 ай бұрын
​@@felipe387yeah essentially with windows installed for you of course.
@Henry-sv3wv
@Henry-sv3wv 8 ай бұрын
and then you want to control your garage door with arduino and find out it actually uses rolling codes :(
@alexwoodhead6471
@alexwoodhead6471 Жыл бұрын
You guys should cover more of this type of tech! I guess with labs, covering this type of tech will become easier
@coedshowers
@coedshowers Жыл бұрын
It also took 2 years + from the time we signed up for backing it before it got to the front door....
@Mabaz
@Mabaz Жыл бұрын
In my country, the use of chips for elevators and doors has just started out, and car keys don't have anything as developped as the ones linus spoke of. It's like something not very developped security-wise over here. Now imagine if I bought one of these...I could literally go anywhere I want and open most cars haha. I am glad it costs 170$, this way thieves will never bother buying it.
@Notchur.Architect
@Notchur.Architect Жыл бұрын
I love how limited yet limitless the flipper is… also, its just so damn cute.
@aoyuki1409
@aoyuki1409 Жыл бұрын
just like a Swiss knife. utterly limited in feature, yet utterly limitless in usefulness
@Henry-sv3wv
@Henry-sv3wv 8 ай бұрын
@@aoyuki1409 spending 200 bucks for kiddy toy tricks, so useful!
@erichilton2364
@erichilton2364 Жыл бұрын
I got my Flipper Zero from the KickStarter, its a cool little gadget. I'm a bit shocked to learn that shipping on them was stopped, I honestly didn't think that would happen. Great video Linus, I definitely learned a couple things from watching.
@fakecubed
@fakecubed 4 ай бұрын
If you read what was on screen, they were stopped because certain models were doing stuff in certain frequencies that different countries have differently allocated, and it requires a license to use those frequencies. It's all about RF spectrum control, not anything to do with what the Flipper was doing with that spectrum.
@erichusted
@erichusted Жыл бұрын
I was just about to purchase this before you posted the video... thanks for making sure it's out of stock again.... -_-
I wouldn’t give this cable to my worst enemy - O.MG Cable
12:58
Linus Tech Tips
Рет қаралды 2,6 МЛН
What Is The Flipper Zero?  Why You Might Not Need One.
13:12
Ham Radio Crash Course
Рет қаралды 382 М.
СҰЛТАН СҮЛЕЙМАНДАР | bayGUYS
24:46
bayGUYS
Рет қаралды 703 М.
Eccentric clown jack #short #angel #clown
00:33
Super Beauty team
Рет қаралды 17 МЛН
100😭🎉 #thankyou
00:28
はじめしゃちょー(hajime)
Рет қаралды 14 МЛН
КАРМАНЧИК 2 СЕЗОН 5 СЕРИЯ
27:21
Inter Production
Рет қаралды 555 М.
How to Change Your Email Address in Microsoft 365
2:53
Business Tech Planet
Рет қаралды 18
Buying a Chromebook was a BIG MISTAKE - Chrome OS Flex
14:40
Linus Tech Tips
Рет қаралды 2,9 МЛН
I’m breaking one of my biggest rules.. - Reacting to Tech Hot Takes
29:40
Linus Tech Tips
Рет қаралды 3,6 МЛН
flipper zero one month review and what I use it for
10:18
Bad Zombie
Рет қаралды 27 М.
Dangerous Hacking Gadgets in 2024 #hacker #tools
11:20
Hacker Joe
Рет қаралды 385 М.
6 Must-Have Security Gadgets That Fit in Your Pocket
9:03
All Things Secured
Рет қаралды 1,7 МЛН
I Bought 10 Weird Keyboards from AliExpress
25:05
Linus Tech Tips
Рет қаралды 2,9 МЛН
Want to HACK with a FLIPPER ZERO? ||  MEGA GUIDE
22:42
Rithim
Рет қаралды 66 М.
Do NOT Plug This USB In! - Hak5 Rubber Ducky
11:37
Linus Tech Tips
Рет қаралды 2 МЛН
📱 SAMSUNG, ЧТО С ЛИЦОМ? 🤡
0:46
Яблочный Маньяк
Рет қаралды 1,7 МЛН
XL-Power Best For Audio Call 📞 Mobile 📱
0:42
Tech Official
Рет қаралды 772 М.
Kalem ile Apple Pen Nasıl Yapılır?😱
0:20
Safak Novruz
Рет қаралды 1,1 МЛН
как спасти усилитель?
0:35
KS Customs
Рет қаралды 387 М.