Infrared: Old Threat Meets New Devices
summary
Shows that 960 fps smartphone slow‑motion video plus ffmpeg frame extraction recovers 940 nm IR remote pulses well enough to decode NEC timings, aligning to a logic analyzer; proves many IP cameras and structured‑light sensors have IR fill lights that emit near 940 nm and can switch at or near a 38 kHz carrier, and that hacked camera GPIO or a Raspberry Pi + FPGA HAT can use those emitters to trigger TVs and air conditioners at distance; hardware capture/retransmit gadget and open‑source IR relay code are released.
AI-written summary · about
chapters (16)
- 0:00Introduction to infrared threats
- 1:49How infrared remotes work
- 3:20Why 940nm and 38kHz
- 5:18Capturing IR signals with tools
- 7:31Slow-motion phones decode IR
- 10:54Challenges with slow-motion capture
- 13:03IR floodlights in surveillance
- 16:21Testing high-power IR transmitters
- 18:58IR attacks via internet-connected cameras
- 20:52Potential consequences of attacks
- 22:17Exploiting photo resistors in IR lights
- 23:42IR watermarks in public spaces
- 24:47IR spatial light modulators
- 26:38Future research directions
- 28:30Key takeaways and supply chain risks
- 29:15Q&A and closing remarks
related talks
14mBreaking Infrared Recapture Detection: Optical-Synthesis Attacks and Depth-Aware...
40mLow-Cost IC Emission Reverse Engineering
32mThe Evil of Spy Camera
14mRed Bleed: A Pragmatic Near-Infrared Presentation Attack on Facial Biometric...
23mCameras, CACs & Clocks: A Story of Millions of Interrogated and...
10mRollingEvidence: Autoregressive Video Evidence via Rolling Shutter Effect
39mHacking your home-reverse engineering wireless transmission
49mxIoT Hacking Demonstrations & Strategies to Disappoint Bad Actors