Breaking the Security of Physical Devices
summary
Demonstrates concrete breaks: eavesdrops 40 MHz AM baby monitors with cheap software‑defined radio, builds an Arduino/Raspberry Pi $50 replay device that defeats widely sold RF home alarms using fixed codes, and extracts keypad data from an alarm’s EEPROM after connecting a PIC programmer. For a 2000–2005 keyless car, collects rolling‑code traces with a button‑pushing robot, analyzes them with SDRs (USRP B200/HackRF) and prediction tools, brute forces the 17‑bit window often unlocking a car in under two hours and sometimes seconds via a manufacturer backdoor.
AI-written summary · about
chapters (18)
- 0:00Introduction to device security
- 1:20Overview of researched devices
- 2:10Analyzing analog baby monitors
- 4:28Frequency analysis techniques
- 5:38Eavesdropping on analog monitors
- 9:18Wireless home alarm vulnerabilities
- 11:58Implementing replay attacks
- 14:29Signal modulation and decoding
- 17:28Alarm system mitigation
- 19:00Hardware tampering techniques
- 22:38Tampering defense strategies
- 24:17Car keyless entry analysis
- 26:43Predicting rolling codes
- 29:49Testing with Faraday cages
- 31:41Brute forcing car security
- 34:44Discovering manufacturer backdoors
- 37:17Future silicon analysis
- 38:53Q&A and conclusion
related talks
51mRadio Hacking: Cars, Hardware, and more!
41mGrand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock
01h 01mRapid Radio Reversing
27mLock It and Still Lose It —on the (In)Security of Automotive Remote Keyless
39mHacking your home-reverse engineering wireless transmission
41mThe (In)Security of Automotive Remote Keyless Entry Systems...
30mDemystifying IoT/OT Hacks With SDR
59mWireless security testing with attack