Uncovering The Truth Behind Flipper Zero Myths!

[@TalkingSasquach]

🔒Remove your personal information from the web at joindeleteme.com/SASQUACH and use code SASQUACH for 20% off 🙌 DeleteMe international Plans: international.joindeleteme.com

[@crsv7armhl]

Hey Sas, Lord Diakon here: Overall good video, I just wanted to clarify something re cars. There is a CVE that can effectively bypass rolling codes called rollback/rollingpwn on SOME cars. While the fobs send a different code each transmission, car makers in their infinite wisdom left an opening where the receiver will resync to the hop the transmitter is on IF it receives 3-5 SEQUENTIAL (very important) transmissions. So if your car is vulnerable, you would read raw ~5 unlock presses and it would always work. Since those are sequential presses your car will always resync to the last hop. As I hopefully emphasized, this recording has to be sequential. Trying to record someone's codes over multiple days are not sequential codes. It does work on a shocking amount of cars, but it isn't really something you can pull off without physical access to the keys.

[@Dannay_j]

This was very much needed once again thanks brotha!

[@TalkingSasquach]

Thanks, I appreciate you!

[@blizzardfoox385]

Gotta love it when misinformation scares sites to take down cool tech 💀 Always glad to see another vid by ya.

[@TalkingSasquach]

Thanks! And yeah, I'm literally talking to several people who have gotten banned from Tindie, eBay and Etsy for trying to sell CC1101s

[@NeoCXid]

I want to say something to the traffic control thing. I am pretty sure u cant controll a traffic light. But i actually worked out to communicate to a construction site traffic light. I was very near to the sensor and i was very lucky but it actually didnt work every time. Construction workers use a remote similar to the flipper zero.

[@djaketech4460]

Talk to you later squatch. Thank you for covering the opticom system. Saw a video where someone tried to convince it works by the sunghz module. So thanks for calling out the fake videos on controlling traffic lights. Would need like security camera leds to trip one

[@TalkingSasquach]

Yah, def not gonna happen, and I love people insisting that SubGhz is going to control a traffic light, but hey, most people have no idea whats going on and its a fun looking video

[@tegaidayt]

The greatest thing I used mine for: I keep it in my EDC organizer. Has a bunch of my work key cards on it. I left my keys inside at closing and used it to get in.

[@Palm.top.lioń]

The only thing I want to do with my flipper is to be able to Rick roll and TV anywhere so I’m learning python and Linux. It’s probably more simple than that but I still wanna learn lol

[@JanKowalski-e3h]

Hi, I am thinking about buying hackrf one h4m . Do you recommend buying it now or in a few months when, for example, a newer version with fixes comes out. Alternatively can I buy a portapack h4m and hackrf one Clifford Heath edition and put them together? Thanks for your answer ❤

[@TalkingSasquach]

So I can tell you that I'm personally going to get a new one with the Clifford Heath edition. I've heard they're even going to remove the bottom 2 SMA's that no one ever uses!

[@londo776]

@@TalkingSasquach Apparently the new Clifford Heath version's coming out Early next year

[@londo776]

Clifford heath version is completely sold out on Aliexpress Until next year

[@TalkingSasquach]

@ that’s why you want to keep an eye on Rabbit Labs

[@DreadFox_official]

Good video man. Thank you for educating the people.

[@TalkingSasquach]

I appreciate you!!

[@timothybradford8216]

9:00 Doesn’t make sense. The key already sent n. That’s what the flipper recorded. Now the key is n+1 and the flipper has n. Use the flipper, n, and the next code the car expects is n+1, which is what the key is. Are there actually records of keys getting desynced?

[@dbcooperisalive]

And, what if you have 2 keys for your car? Why wouldn't 1 get desynched if you use the other?

[@crsv7armhl]

Yes

[@kevt2988]

@@timothybradford8216 I was messing about with my own and a friends car mine a VW and his a BMW and although it worked once on his car but it also desynced his key from the car! My heart sank I thought it was gonna cost me a lot of money but I turned the flipper off and had to get in his car and hold it up to the key bit luckily enough it synced again but for 5 minutes it wouldn’t lock or start the car so yeah I won’t be trying that again haha

[@Aaron_Cantrell]

You are right. What happens when you accidently press the key fob when you are away from your car, wouldn't that desync them? From what I've heard the car will answer to a key that is anywhere between n and n+120 or so, because of accidental presses.

[@crsv7armhl]

@@Aaron_Cantrell Yes, pretty much. Its called the key window and it shifts according to the last key used

[@HVAC_Tips_Tricks_Calcs]

Does a roll jam attack actually work? And does it de sync the key fob?

[@Yeahitsame]

Idk much about this type of tech stuff as in how things work or capabilities but I do love it reading and seeing the new “gadgets” everything they can do. Question I have is what if someone created custom firmware having the flipper emulate a tap and pay device instead. Is that even possible? Just trying to think outside the box of other exploits people might be doing to make everyone aware of other possible vulnerabilities besides “cloning” the cards which isn’t possible due to having to crack the encryption keys that the banks use.

[@lorenzo9676]

Quick question is it possible to turn off someone headset to their ps5 if so how to block them from messing with my controller ..I have the headphones connected to the aux on ps5 but still no sound comes out of the headphones

[@MarcellsWorldJjr]

5:16 there a guy with an external infrared light that he has to his gpio controlling them vs the small thing. its a round light full or ir led's

[@PhilieBlunt666]

What about with rabbits multi pass mag spoofer... i have a feeling if you can get a working dump of a debit/credit card... what are your feelings on this?

[@Bailey-k2j]

I have thier mag spoofer. It only emulates the mag strip reader, which means it won't work if the CC has a chip, because the PoS will require a chip read.

[@ddsubsbbumpin]

There's a gpio ir board on Amazon with a 18650 for power. I picked one up a few months back it works really good it's the iotmug turbo ir dazzler if I'm not mistaken i don't have it with me at the time of posting this. Id love to see your opinion on it or their other boards aswell.

[@oggatog3698]

2:13 the problem with using the flipper for credit card payments, I think, is that the reply back is too low for the flipper to read. I believe it's like 813 kHz which is below the flipper's low bound of 300 MHz. But, if someone has figured out how to lower that boundary then it should be possible.

[@SandraWuerthner]

Here in Austria we have a E-Card (medical reasons) you need them for the doctirs, medicaments... This card has also a NFC Chip, if you scan it with the phone or the Flipper - the UID changes every time.

[@Zardoz66]

Thank you Sasquach for debunking some of the fud thats out there.

[@tyronschannel]

You've being giving the best guides and you actually made me but a flipper zero to try and rn I'm waiting for it to come in the mail, I actually bought it a few hours ago😂 and I've watched you for a while, keep it up❤

[@TalkingSasquach]

Thanks so much! I love making these videos and if I can help someone out, its the best feeling!

[@MendezMotorizedBicycles]

Same here 🎉 I wish it could get here faster.

[@GooseLoose08]

I just think flipper videos should be banned from tik tok or you should have to take a knowledge test to buy one

[@TalkingSasquach]

Yeah its so hard because while the Flipper CAN do some really interesting stuff, most of the viral stuff is totally fake

[@GooseLoose08]

@@TalkingSasquach so true and it gives the wrong people like officials bad impressions and ruins it for the rest of us

[@moslimislam5714]

Please never become a policymaker. That's the most ridiculous thing ever

[@GooseLoose08]

@ ur just salty

[@moslimislam5714]

@GooseLoose08 ur a silly dictator

[@BonaFideWildLife]

I love the informative and entertaining content! I'm new to the channel so I'm sorry if there's already a video, however, is there a video about the Top X things (not a how-to) that a Flipper Zero can do? Thanks and thanks for being transparent! I may watch click-baitey videos, however channels like yours get subs!

[@ColsenWallis-z2w]

Can you make a video about the FlipperHTTP firmware for the devboard. It seems like it gives the board web access and it even has the ability to give fun facts, the weather, and it even has a web crawler?

[@YetAnotherNotHacking]

this video should be spread. thank you for this!

[@Mr-x-683]

11:30 it works easy. The problem is even if you put credit on the card then clone it 3 times or many times thinking that you can use it over and over, is not going to work

[@Squeek]

Love these videos. Blows my mind people still think they can use a flipper as their card

[@TalkingSasquach]

For real, this is why I keep yelling it from the rooftops!

[@GreenGrapesMilk]

Good video and explainations. Thought i was using the flipper wrong. Good truths. Subscribed 👍

[@DirtyPlumbus]

Part of the problem is that one of the best ways to grab attention on the internet is to give wrong answers. People jump to correct you, and it all generates a cascading effect of interactions.

[@rj8665]

I really liked this video and I think it would be nice to have more videos like this.

[@TalkingSasquach]

Thank you so much! I appreciate you! I hate calling people out and I like making videos full of positivity, but I want to make a stand against people who are misrepresenting the Flipper Zero and are hurting the community. Thanks for your support!

[@fat2fit199]

A the flipper actually open parking garage gates?

[@Mr-x-683]

5:03 only America has traffic light with ir reader. A 911 dial sent to the traffic light should work but you need a lot of power for that. Flipper ir is strong even across the street but to get to the traffic light …. I doubt.

[@brickerhaus]

Is that a clear UV-K5? Oh please share how you did that.

[@TalkingSasquach]

You can actually just buy that on AliExpress

[@MarcellsWorldJjr]

3:20 that actually had sound and he was using the card skimmer feature

[@productisright]

Rolling codes is nothing but speed bump I didn’t even have to slow down for. Simply block the frequency on one flipper while capturing the code on another or hack rf or any other device and because the codes never reached the car, I’ve now captured multiple working codes that can be used later.

[@Funkteon]

Opticom Infrared Emitters are the size of a CB radio and require 12V at 2amps to work on traffic lights...

[@bryant1815]

Delete me threw me off😂😂 I was ready for that pcb way 🙌😂

[@VDL.Original]

Please make a video .. what Flipper Zero can do ? Number wise ..... Or it is just a universal remote ..

[@TalkingSasquach]

about 75% of my channel is on what Flipper Zero can really do!

[@Mr-x-683]

7:37 just don’t 😂. People don’t deserve it. If they are fool to believe then let them have it. Using your key will send a code to the car but never gets to it. Instead is going on the flipper. The car is waiting for that number but instead the next one after that comes to the car. So because the car lost the sequence of the numbers in the remote, blocks automatically all the signals and you have to call a tow truck. 😅 Update. 9:13 you explained what I mentioned 😅

[@BlackLion777-77]

What kind of masonic symbol is that on your 3D printer?

[@TalkingSasquach]

It's prob the sticker for the Illuminati Party. That's about all I can say about that.

[@Exzemie]

Please make more videos like this, they are great

[@timothybradford8216]

So this is the video we send to our friends

[@lethalgaming2882]

7:15 It's called a replay attack and can be done by any sdr to be honest

[@AthleticCoast81]

It can run doom tho-

[@TalkingSasquach]

It "can".... kinda

[@AthleticCoast81]

@TalkingSasquach nothing beats the pregnancy test

[@liekkaslove]

The stupid tiktok made my wife believe that flipperzero is good. for me, i dont think so, because i know that emulating isnt that simple,even im music major,who likes techs, But i really dont know she like it because it looks cute or she bought those lies for real. she is a softwear engineer. guys i have question for you, i should buy flipperzero that she wanted for the gift to her or buy what i think it actually worth the money (ESP32 cardputer) because i dont know much of these. what you think?

[@galvanicmass]

So ive just got a flipper zero and i know its not that powerful but its fun. Ive just bought a IotMug Double Barreled IR LED Blaster so see if i can walk around turning stuff off lol

[@TalkingSasquach]

I can tell you from experience, yes... yes you can lol. Just don't be a menace!

[@galvanicmass]

@TalkingSasquach oh no I wouldn't.......maybe mac Donald's for a laugh but that's it I promise

[@worgle123]

Using the latest Momentum dev firmware, unlike you, I was able to not only read the number, but also the accurate issue/expiry dates. Some cards showed the owners name. Some even give area codes, but not sure how accurate they are, or where they are meant to lead to (obviously not the owners address, but maybe the bank HQ...?). I am also able to see the currency on some cards, which is enough to guess the country. With some other firmware, they have a "transactions" tab under more, but I haven't been able to see anything in it so far. It's worth noting that I am testing with Australian cards (debit/credit and personal/business) from ANZ, St George and American Express, which could be somewhat different to the cards in Sasquach's area.

[@TalkingSasquach]

Interestingly enough, I was one of only a couple people who had that expiration issue. Willy sent me a patched version and it worked again.

[@worgle123]

@@TalkingSasquach Great to hear it's been resolved!!

[@justajazzyleaf]

THIS LOOKS SICK

[@xanslol1192]

You can jam it when they try to lock it and go in that way

[@lordmemester8798]

nice! thanks for sharing

[@TalkingSasquach]

Thanks! I appreciate you!

[@jackwebb2540]

Hey fun fact Flipper Zero can be used to play Lazer tag thought I'd put that out that out there if you know you know got my son a high score that way🤣

[@TalkingSasquach]

People have also made DEFCON badges that turn it into an even bigger sensor, its very cool!

[@victortorres1585]

What if the first video he was emulating a gift card and not a credit card

[@TalkingSasquach]

So I definitely thought about that, but gift cards aren't typically NFC and using the AWOK board doesn't transmit anything but WiFi/BLE

[@Mrm-pg2oh]

I agree. 100% emulated a GC here. Smart observation. Euro isn’t known for fake content. Much bigger than Quach too which has me really questioning the intentions of this video. Quach is wrong here.

[@victortorres1585]

@@Mrm-pg2oh if you pay attention he is under the detect skimmer part of the marauder so def fake unless he is a secrete genius coder

[@craxxysum1264]

Sassy, you can reverse the algo by copying enough codes to actually make and educated prediction of the next code, sooooooo it's back to that design implementation....

[@timothybradford8216]

Nice intro

[@L0rdK0nda]

Man that euro throttle guy makes us look dumb...

[@TalkingSasquach]

He's gotta have a big brain!

[@Mrm-pg2oh]

Pretty sure Euro Throttle is on another level than this guy. Don’t get me wrong tho. Quach is pretty decent with flipper tutorials. Like apples to oranges. Euro is all about red teaming anyway so not sure why you even mention him here.

[@TalkingSasquach]

@@Mrm-pg2oh It's because EuroThrottle is literally using a Flipper Zero and Dual ESP board in a way that it can't do. I'll admit, I'm no expert on a lot of things but since I've been doing this for so long, I've met a ton of people who are actually experts in their fields. When I can't find a single person who thinks this is possible, including the people who wrote the NFC protocols for Flipper, I'm going to have to say I believe its fake.

[@Mrm-pg2oh]

@@TalkingSasquachI see. I was confused because EuroThrottle is highly respected in Red teaming which threw me off. This is the first time I seen someone call out Euro tbh. So are you saying all his videos are fake??

[@canadiansike7389]

@@Mrm-pg2ohyou must not be on the internet much

[@Thadopeera]

I know that first guy from IG 🤣 He never tells you who made the board or where to get one.

[@TalkingSasquach]

It's 100% the AWOK Dynamics Dual ESP Touch board, check out his website here awokdynamics.com/ Just be aware, there's absolutely no way you're going to be able to use your credit card with it!

[@357molotov]

Skeptic's Goggles - also known as Skeptical Spectacles?

[@TalkingSasquach]

Filing the trademark as we speak

[@357molotov]

@@TalkingSasquach Haha Awesome! Great job on the videos, man, love your enthusiasm. Been thoroughly enjoying them since I first found your channel a few months ago. Learned a whole heap of stuff from you in that short time. You also turned me onto M5Stack products, my Cardputer has been a lot of fun. So thanks, man! Keep doing your thing!

[@SuszVR]

8:57 actually, to resynchronize it, just click unlock car again on the key because if it was as you say that it was possible to desynchronize the keys from the car, it would be very easy to block all cars by simply sending such a repeated signal simple example key send signal 200 car recive signal 200 car unlock key send signal 201 flipper caught this signal car dont recive signal 201 flipper send signal 201 car unlock easy key send signal 202 car dont recive signal 202 car still lock flipper caught signal 202 but before flipper sent it key send another signal because car dont open the first time the signal is 203 and car unlock and now if flipper sends signal 202 the car won't open the keys work in such a way that each time the button is pressed, they send the next code from the list on the key (in simple terms)😉

[@crsv7armhl]

Not all cars resync like that. Cars from approx 2007 - 2011 often need to be programmed via the OBD2 port (I have one). Cars after 2011 *some* will resync (reset the rx window) on multiple key presses which can be abused (Rollback CVE) for unauthorized access. Still other cars make require a specific sequence of events to be performed with the windows/ignition turning etc. Finally some are resynced by simply turning the key in the ignition. But on a desync, the car can "blacklist" the fob until it is resynced, even if you catch up to the correct code

[@diomaiaal]

Sadly we are in a era that is more profitable spread misinformation on social media platforms instead of spreading knowledge. And this sucks a lot.

[@moormoor4281]

English England Thanking you

[@hazer72]

small foot??

[@supersavagegodgaming6888]

So flipper zero is not watch dogs 💀

[@OneAndOnlyZekePolaris]

If using the phone app, about 50+%?

[@tarjeisilluehodneland8377]

Your explenation about the "de-sync" of car key and car cant be right. If I press any key on my cars keyfob while out of reach of my car the car still reacts to the rolling code from my key the next time I use it. But the key will send out the next rolling code. With your explenation every car would have to go to the dealership to get "re-synched" all the time 🤔

[@gingercat512]

He had his card hidden behind the screen I guarantee, almost same size as a card that screen

[@OneAndOnlyZekePolaris]

There are worse things that TikTok did when they was using their old app name.

[@mw6886]

Its funny.. I made fun of that guy all the time that he was just using a Geiger counter.

[@PhilieBlunt666]

Hey my furry genius friend, would be willing to make a case for my pwnagatchi. Id love to have one like that pager case you made based on cerial killer(s pagesr

[@ceefusjenkins2281]

Awok is awesome.

[@londo776]

It's just a glorified remote control no more

[@TalkingSasquach]

I can do a decent amount of things, but there's definitely a LOT it can't do!

[@LJMOO7]

Can you brute force into a hotel room door open with a “ glorified remote “

[@definitelynotnescap]

@@LJMOO7 technically yes, if you got some years to spare and a good 80 GB fuzzing file

[@LJMOO7]

@@definitelynotnescaptrue

[@linpad_thequiet6089]

Over hyped too. I have one but it’s not like this at all

[@drememyhihavie5776]

Again ... This proves it makes no sense looking at your videos. You've been promoting the flipper zero for so long ( and making people buy it for the price of a playstation and use it just as a toy ) and now you are are down-voting it. And all of this to get views in the form of money . Influencers bullshit !

[@TalkingSasquach]

I'm actually showing what Flipper can't do because it's these fake videos that actually hurt the device. Amazon stop selling them because people thought they could steal credit cards, Canada wanted to ban it because they though it was being used to steal cars. I made this video because I love the Flipper Zero and the people who make addon boards for it. People making fake videos are hurting the FZ and other people who are making great products for it. The last thing I want to do is call people out, I like making positive videos, but I've got a platform that represents Flipper Zero and if I can use it to set the record straight, I'm going to do it again and again.

[@drememyhihavie5776]

@@TalkingSasquach Sure.... Influencer's BS answer: kzbin.info/www/bejne/pmXYmaqNo72fj68

[@OneAndOnlyZekePolaris]

LET HIM COOOOOK!!!!

[@EC.Nikita]

❤

[@TalkingSasquach]

I appreciate you!

[@sierrawhiskey5144]

Who owns flipper town!

[@kekkodance]

you put your printer on a concrete slab, nice cnc kitchen advice

[@TalkingSasquach]

It's actually on two 18" floor tiles with a 2" foam pad between. It's basically for he same thing, but Bambu's firmware has been getting better and better that you don't really need any of it anymore, their vibration cancelling is great! But in general, yah I take CNC Kitchen as solid advice all around

[@heyzack7162]

Here is the comment you asked for

[@TalkingSasquach]

Thank you for watching the whole video! You're an absolute legend!

[@minecraftinthehouse3060]

Me not first😡

[@TalkingSasquach]

I still appreciate the engagement!! Thanks!!!

[@Actiongrow37]

Make flipper zero using esp12f

[@timothybradford8216]

7:25 😂

[@Nicolas_2010]

hi

[@TalkingSasquach]

Hey! Thanks for watching!

[@emoranger37]

Love your videos, please stop supporting the Sahara Casino. Alex Meruelo the owner is a crook that sold my favorite hockey team.

[@thumbtak123]

Jokes aside, the videos showing fake content about standard hacking are hurting the community. Like you said devices are getting pulled from Etsy. This is where it isn't funny. Some of us are pentesters and need these tools. So, please stop!

[@iblackfeathers]

pcb way! ¯\_(ツ)_/¯

[@TalkingSasquach]

It is the only way!

[@heapofrocks]

Copy card from service tech = free games. Got it. 😂😂😂😂 jk jk