Talk
Live Hack: Demonstrating Common IoT Security Weaknesses
Joe Hopper
31:21
How would hackers attack your IoT device? Joe Hopper, Principal Security Consultant at Fracture Labs, will demonstrate several complex hacks against off-the-shelf IoT devices to shed light on the design and implementation weaknesses seen across the industry. He will walk through common attacks such as: finding and connecting to hidden serial consoles, boot process hijacking, memory analysis, firmware extraction, password cracking, and more to gain unauthorized access to IoT devices and customer information.
By using the same approach hackers use against your devices, you will walk away with a better understanding of where and how you need to tighten security controls.
1 / 4
Please log in or create an account to test your knowledge and see the answers.
When you find an unlabeled three-pin header on an IoT board and want to determine whether it is a UART serial console, what did Joe Hopper demonstrate as the correct first approach?
A
Hook up a USB FTDI cable immediately and try different baud rates until you see readable output.
B
Use a multimeter to locate ground and a logic analyzer to capture signals during power-up, then apply a serial decoder to identify UART traffic.
C
Assume the middle pin is VCC based on the board layout, probe it with power to see if it powers the board.
D
Desolder the chip connected to the header and read its datasheet to confirm the interface type before making any connections.
E
Only rely on silkscreen labels or module datasheets without doing any live signal capture.
Thanks for the awesome talk Joe, I learned so much that I'm now afraid to connect any wireless device in my house ha. But seriously there are some great examples in this talk about how devices can be exploited, and how easily it can happen. It has really openned my eyes a lot more to IoT security.