~/talk

Decentralized Communications: Deep-Dive into APRS...

Talkat BSidesSF 2025 · 2025-04-26..04-27· [security, embedded-and-hardware]
links:none on file
links:none on file
slides:none on file

Comparison of two decentralized radio stacks with concrete tradeoffs: APRS runs AX.25 on ham bands (144.390 MHz in North America), requires an FCC call sign, forbids encryption by Part 97, uses trivial call‑sign hash authentication that is easily calculated and thus allows spoofing and public eavesdropping; Meshtastic runs on ESP32/NRF devices over ISM (915 MHz US), uses AES-256 optional payload encryption, three-hop default mesh routing, protobuf headers and LoRa chirp, has had six CVEs including a reported RCE (2025‑2497) — upgrade to 2.5, enable encryption, and use out‑of‑band key distribution.

AI-written summary · about

  1. 0:00Introduction and setup
  2. 3:16Need for decentralized networks
  3. 5:27Historical context of APRS
  4. 6:57Radio frequency cheat sheet
  5. 8:02What is APRS
  6. 13:59APRS technical foundation
  7. 18:10APRS security model
  8. 21:20Introduction to Meshtastic
  9. 23:50Meshtastic technical details
  10. 28:54Meshtastic packet structure
  11. 30:19Meshtastic security model
  12. 32:53APRS vs Meshtastic comparison
  13. 35:02Recommendations for users
  14. 37:31Conclusion and resources
  15. 39:37Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.