A Lightbulb Worm?
summary
Examines Philips Hue internals, shows ability to extract decrypted firmware by forcing bootloader into debug, uses a custom board and clock-glitch attack to leak RAM instead of destructive erase, and demonstrates remote compromise over hundreds of meters with a drone-based takeover during war‑driving; describes dumping SRAM during OTA, JTAG/serial bypass of Bridge root, power analysis suggesting AES counter mode, and outlines how a worm could propagate across bulbs.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:56Colin Flynn
- 9:36Zigbee Wardriving
- 11:42Live Demo
- 12:58Details of the Teardown
- 18:43Transmit Buffer
- 19:01Glitch Attacks
- 22:47Power Analysis
- 24:30Conclusions
related talks
45mThe Bulb That Knew Too Much: A Journey into IoT Security
30mInside the Mind of a Hacker: How a Light Bulb Almost Stopped Christmas
49mReverse Engineering a Bluetooth Lightbulb
52mReverse Engineering a Bluetooth Lightbulb
15mHacking a WiFi Lamp
30mCommSec D1 - How to Find and Exploit Bugs in IoT Devices
40mWearable Botnets and Happy Hacked Drivers
52mIoT Hacking 101: Reverse Engineering The Xiaomi Ecosystem