smea - Adventures In Smart Buttplug Penetration testing - DEF CON 27 Conference
ฝัง
- เผยแพร่เมื่อ 10 ก.ย. 2024
- Analysts believe there are currently on the order of 10 billions Internet of Things (IoT) devices out in the wild. Sometimes, these devices find their way up people's butts: as it turns out, cheap and low-power radio-connected chips aren't just great for home automation - they're also changing the way we interact with sex toys. In this talk, we'll dive into the world of teledildonics and see how connected buttplugs' security holds up against a vaguely motivated attacker, finding and exploiting vulnerabilities at every level of the stack, ultimately allowing us to compromise these toys and the devices they connect to.
smea
smea got his start making video games for closed consoles like the Nintendo DS using whatever hacks were available at the time. At some point consoles started getting actual security features and he transitioned from just making homebrew software to actually making the jailbreaks that let people run it. He's best known for his work on the Nintendo 3DS and Wii U but has also done exploitation work against high profile web browsers and virtualization stacks. Now he hacks buttplugs, apparently.
Twitter: @smealum
Github: github.com/sme...
Talk about a back-door vulnerability.
Plug'n'play.
IOT: now people can literally hack your ass.
poopnach 😂😂😂😂😂😂😂
also, lol @your name.
Yeah it kinda stinks hey.
A secure connection is especially important if you value your privacy here.
This PowerPoint presentation is exceptionally well made.
Butt plug that doubles as your fin dom, forcing you to mine crypto currency, Buttcoin.
I'm dying🤣🤣🤣
holy shit it's smea. I remember looking at his 3ds exploits back in the day. Really moving up in the world keep it up
Lenny69 シ Thats what she said.
Rofll
He stayed in the realm of entertainment technology
This is the same dude who made one of the first 3DS exploits.
also some of the most technically impressive original DS homebrew. smea made some games that looked way better than anything officially licensed
Came for the funny headline, stayed for the enlightening view on the modern version of "you're only as strong as your weakest link".
The jokes in the comments really didn't set me up for how informative and well thought out this whole thing was going to be (pun unintended). It's a funny subject sure, i think almost anything sex related is inherently funny to an extent, but there were some pretty serious concerns brought up here and discussed.
True, and this topic extends to so many other things as well. The Internet of Things is becoming more and more prevalent. Security often lags way behind. So if hackers can just hijack a sex toy, imagine what happens when things like smart homes start becoming more common.
One of the most important research topics done to this date.
2019 right
It really is though. There are hundreds of millions of iot devices being made and sold. This one could now spread to everyone of that users friends and then their friends and in a matter of minutes every person with that device or any device with those Nordic chips could have their pc ransomed. This is just a proof of concept on a buttplug but those chips are also in home automation things and factories, phones, anything with ble could have one of these chips or a different one that may have these bugs. It is supposed to get the manufacturers of IOT devices to take security more seriously and not just bang out their next hit app as quickly as possible.
The origin for dildo is supposedly the Italian "diletto" (delight) from the Latin "dilectio", the verbal noun "diligere" (to love/hold something precious).
I want to see the TSA guy's reaction when someone has a bag full of disassembled, hacked buttplugs.
Also, surprised you didn't cover the privacy aspect. Do you really want anyone with a phone to be able to see that you have a buttplug?
with a......?
The hacking the plug part would be funny as well in the bar multiplayer scenario.
If you let it do funny shit, you could probably find the person actually using the buttplug at that moment.
And not just see that one is in your BT range.
But even at home it's a huge privacy concern. Because I can already see my neighbours devices, like some TV with BT, and I can even Screencast over wi-fi, because the TV has an unsecured ad-hoc WiFi.
So with the buttplug thing, everyone you share a wall with, will be able to see exactly which neighbour is owning that buttplug, due to the limited BT range.
Marcel Chb , if the neighbor has a HD wifi antenna, you might even be seen by all the way down the hall or from the other floor. lol.
@@GoodHydration lol
Privacy in a public space is kinda ironic.
from the 3ds to the buttplug, this man can hack anything
i cannot believe this is the same smea from the 3ds homebrew scene
That gives local multiplayer a whole new meaning
😂🖒
That moment he says "I'm terrible at soldering... but i do have a BUNCH of butt plugs like this in my bag... uhh.."
I'm waiting for the "I've got one in now" reveal. Estim could be painful if weaponized.
This is smea, the the 3DS hacking smea, hacking a BUTTPLUG, okay, I'm done, I've seen it all.
butt wait, there’s more!
29:26 Backdoor packet.. i wonder why audience didn't notice that
So, my field is cybersecurity, but seeing as I moonlight as a cam model I find this talk extremely interesting...
I lost it at "sniffing butt plug traffic."
I love how the YT auto-captioning writes "it's time for a live demo … please bare with me".
"HONEY, WHAT'S THIS!?"
"That's and ehm... ehm... teledildonic buttplug... We can control it through an app"
"..."
"..."
"Honey, I'm borrowing this for research purposes"
Why would someone add all the "uhs" and "huhs" to the subtitles?
I OPENED THE COMMENT SECTION TO FIND THIS EXACT COMMENT
Accuracy, obviously.
what a well put-together talk. funny at first, but damn well made.
Did not plan to watch a video about smart buttplugs.
Did not regret it strangely...
Hilarious. Liked the flow of the talk too, going from more complex to being able to just do it over a message.
14:35 "There was a debugger...." - I nearly lost my shit!! :D
A buttplug might help with that!
Lol
Cyberpunk powerbottom
Gives the term/proverb: "Owning your 4ss" a whole new meaning. 🤔😂😜🤓
In the future, there will be voice-activated/deactivated models that can be programmed with safe words. Imagine backdooring one of these things and taking someone hostage (lol) by their safeword.
It's so hard to take this seriously when he keeps saying "hacking buttplugs" xD
(edit:) He said "hostile buttplug". I'm dead.
this is why I
H A T E
internet of things devices
Internet of Butts will change everything.
thank you youtube algorithm
If no one is concerned about security in IOT after this geez. Dude can hack your a$$. Doesn't get more intrusive than that.
Что смотрят программисты:
Что смотрю я:
Don't let hackers get you in the butt
Hackers are a pain in the ass.
StallmanWasRight
Please tell me the command id is really DEADBABEBEEF, and not a well hidden joke.
all the ppl thinking "Oh man, I'm going to make that cam girl LOVE me now!"
😂😂😂😂😂😂😂😂😂
Sadly I assume their reactions to your donations aren't entirely authentic, regardless of all the good vibes you're sending.
@@thewolfin you'd ve wrong to a certain extent.
Its been proven that f3males do find money arrousing and appealing...to a higher degree than any male counterpart would.
Its one of those psichological traits f3males developed throughout history when power was not only strength but also wealth
@@rronaldreagan it still is and I have met some genuine good cam girls who are also gorgeous! But they are like 10 in the 900 or so I have met online!.
Use scenario 3c: "MMO"
waiting for battle royale
@@GewelReal You made my day :>
from 3DS exploits to hacking ass
Good recommendation, TH-cam.
Dil* `...which entered English in the 14th century by way of Anglo-French, descends from the Latin verb diligere, meaning "to value or esteem highly" or "to love."`
Do /do͞o/ verb
1.
perform (an action, the precise nature of which is often unspecified).
2. achieve or complete.
What a headline
My favorite part was when he said "buttplug".
Alan Turing didn't die for this, smh
Oh my God the world is truly has gone mad,I have now head something I can not get out of my brain,oh God help me !!!
Has the manufacturer patched the app yet? Even if they don't want to bother fixing their buttplugs, letting users send arbitrary HTML to each other that automatically executes is a massive lapse in security. All it'd take is one guy with a malicious script and someone could pwn every user on their app.
Does this mean that if an audience member w/ a Lovense friends list had connected to his buttplug during the presentation, it would have sent out his viral ransomware through the actual Lovense social network?
The word Teledildonics was coined by Ted Nelson, the guy who invented the back button, and also coined the term Hypertext. en.wikipedia.org/wiki/Ted_Nelson
Viral Buttplug Worm would be a fantastic band name.
Does Windows enjoy that special "dongle" as much as the user his "device"?))
How did he make it through TSA with all those WMDs?
TheRealMrRoboto I assume you mean Weapons Of Mass Distraction ;)
The vulnerability at 37:00 is absolutely fucking infuriating as a dev
FFS someone take his coffee away before the talk next time; damn he managed to pack a ton in to 45 minutes, even talking so fast!
He's nervous, could be coffee, but also he is in front of a huge crowd and he's talking about butt plugs. I get nervous if I do either of those seperately, dude managed to do both at once.
His plug might have been breached, give the guy some slack..
Loved this talk so much, so good! I own both sizes of this toy too xD Please don't hack it! :c
About the battery explosion part, these battery should have hardware protection against these, so it's safe to assume that you won't start a fire inside your butt.
wonder if there are any on Shodan
"Popping boxes"..
Explorer will still open and saves files for the internet if you paste the link in the save as, why does it still do that.
This is a great video. A rare find
LMAO Big Clive sent me 😂😂😂😂😂
That pink calculator of his makes him suspect. 🤔😄
That fucking title dude, wow
WHY IS THIS IN MY RECOMMENDEDS?
I doubt (I sure hope, at least!) it would be possible to actually hurt someone with executing malicious code. I'm not an expert in certifications for this specific field, but I do work with product safety for adjecent fields. All products to be sold must be certified and guaranteed to not cause personal injury. I'm pretty sure the regulations for stuff that goes into people are more stringent. You can either solve this in software, hardware, or a combination. If you select to solve it partly in software, development must be conducted in very specific ways and includes a lot of audits. In practice, this is a lot of work, which is why you would almost always try to solve these problems purely in hardware, to be sure that no matter what the software does, no harm can come to the user.
Things like charging the lipo, thermal management etc are likely done in hardware with a dedicated IC (likely the SOT23-5 and the other ICs close to it). So the only thing I can imagine doing is just running the motor at full power (which, again, it should be able to handle without heating up too much). In theory you could start/stop the motor in such a way that the back-EMF would damage something, but there seems to be protection from such things.
So no, I don't think you could weaponize the buttplug in any meaningful way.
Soon we will get news articles like: "a person was robbed for a e-wallet by robber with weaponized hostile buttplug..."
he said so many things id never expect to hear about a sex toy....
but can it run linux?
I think one of the Lovesense devs had a quite interesting thread on development these toys on twitter.
Got a link or name?
Unfortunately not and Twitter is crap for those super fuzzy searches.
It was maybe a year ago so these vulnerabilities are newer, but the developer sounded pretty professional so I assume they're on to it now. Hopefully.
12:53 DE AD BA BE
dead babe?
It's common to use numbers that spell out words in hex when you need a "magic" identifier. You have 0-9 and A-F, usually 8 digits, so things like DEADBEEF, CAFEBABE, D06FECE5, 5AB07A6E...
@@renakunisaki Oh god, "D06FECE5" was a new one for me... 😂
He used even DEADBABEBEEF in the video
“Just don’t be a dick”🤣🤣
Lol best talk 😆 🤣 😂
Reddit brought me here.
Just here for the comments :D
same
When memes are more important to you than actual knowledge FeelsBadMan
Yuzuki1337 for some people, knowledge of memes is the true knowledge
what? how? why???
How am I supposed to not click on this?
4:20 "don't be a dick" ...i guess that should have meant ..."don't be a pain in the ass"
Same thing
1:06 Welp, he made me look up "dildo" on wiktionary, so I'm sharing it with you:
"Unclear; possibly an alteration of Italian diletto (“delight”) or English diddle. Compare the spelling dil doul, found in e.g. The Maids Complaint for want of a Dil Doul, a song in the library of Samuel Pepys."
I forgot to count how many times he says buttplug but am guessing 450 times.
Best presentation ever :D :D :D
Anyone up for a "from there" drinking game? 😂 PS very nice talk btw
Why is this 15 FPS?
th-cam.com/video/hty3ZW3Soag/w-d-xo.html
Hacking a sex toy without consent to access the toy would certainly be considered sexual assault. I do not believe he stressed this enough during the talk, especially at the end during the closing remarks. Although this may be a fun educational experience, there are serious legal concerns here if someone malicious attempts to replicate these results.
I should probably contact a lawyer on rape and sexual assault for a more legal explanation. I'll be sure to respond here if I do.
WHO THOUGHT IT WAS A GOOD IDEA TO INCLUDE ALL THE "UH"S IN THE SUBTITLES?!
legendary shitposting
you could actually melt and burn the buttplug a bit with the battery IF it's a Lithium-ion and only if you can control the battery management system (if it's coded on the chip then should).
What you could do then is the that it doesn't stop charging the next time it's on a charger. This will cause the battery to overheat if not manually removed, which most people don't do as these things often get charged overnight or hidden away.
Meaning you might set fire to their freaking HOUSE ....
Seeing how most small devices use a Lipo battery because of energy/size and the convenience, it's most likely their toys also use Lipo batteries.
If nothing you can always permanently destroy the toy by ruining the battery regardless of most battery types.
Now they might have a BSM on the battery, or have a hardware safety feature in there somewhere, that's something I don't know.
Nonetheless the potential to set someone's place on fire which is so relatively easy is REALLY scary.
@sses on fire. 😄
if would love to know this patent number "tipping money over internet to control buttplug".
ps: nice XSS for a not so web dev guy ;)
34:42 Dead Babe Beef
And he says "it'd be great if we could spread it over the internet", uh, I think that's the point of the Hush isn't it?
Dongle.
oh no
OH NO
Ma Man
He's "sniffing" the "dongle" and "dumping" it's content.
He should have owned this talk. Instead of being nervous and shy when needing to talk about the "sensitive" stuff he should have been either direct or witty with some puns or double meanings.
So many good chances missed.
Very informative nonetheless and I dont want to be anal about it, but its hard to watch this guy having stumbling over his words nervously for too long
😂😂😂😂😂😂😂
I wonder what the bet was that he lost.
Does anyone remember that Chinese gaming keyboard that shipped with a built in key logger a few years ago?
What has become of humanity...
Man wtf
It's helpful to watch this at 0.75x speed because the guy talks way too fast.
He kinda sounds like he is having one of those subjects of the talk in him as he is going through the presentation.
He is obviously very nervous.