NinjaTV - Increasing Your Smart TV's IQ Without Bricking It

Presented at DEF CON 22 (2014), Aug. 9, 2014, 2 p.m. (60 minutes)

Smart TVs are growing in popularity. Set-top boxes like Apple TV, Roku, or WD TV can make your “normal” TV "smart" and Smart TVs even smarter. Despite their functionality, they’re often missing interesting features, like bit-torrent, VPN and even specific TV channels. This presentation is about how to hack into WD TV set-top boxes and how to add experimental functionality without the risk of bricking it. Whether you want to add exotic TV channels, watch right from bit-torrent, or are crazy enough to do bitcoin mining on your TV - you are in charge. We will demonstrate several methods to become root using everything from remote exploits to hardware hacking. Unfortunately, just becoming root isn’t sufficient to make persistent changes. Because stronger modifications put your device at risk of bricking or of losing specific services, you must dig deeper. We are going to present and release our "adjusted" firmware that keeps all the manufacturer's encryption and service DRM keys intact. The firmware is minimally invasive and enables customization without risk. Patching becomes as easy as an SMB software upload. For those who want get deeper and dirtier, we will explain the firmware structure, how to extract the relevant encryption keys, and discuss the protected software modules. This includes a short overview of relevant tools to do hot-patching, live-debugging, and pointers to get started on reverse engineering core applications.

Presenters:

• Felix Leder - Director, malware research, Blue Coat Norway
  Felix Leder leads the mobile threat research at Blue Coat. Taking things apart has been a life time passion for him. His hobbies, like collecting bugs in malware and botnet takeovers, have resulted in successful take-downs of large malicious networks. As a member of The Honeynet Project he is heavily involved in open source security and has been instrumental in developing a number of malware analysis solutions, including Cuckoo box, Norman's Malware Analyzer G2, and Blue Coat's MAA.

Links:

• https://defcon.org/html/defcon-22/dc-22-speakers.html#Leder
• https://infocon.org/cons/DEF CON/DEF CON 22/DEF CON 22 slides/DEF CON 22 - Hacking Conference Presentation Felix Leder - NinjaTV - Increasing Your Smart TVs IQ Without Bricking It - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 22/DEF CON 22 slides/DEF CON 22 - Hacking Conference Presentation Felix Leder - NinjaTV - Increasing Your Smart TVs IQ Without Bricking It - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 22/DEF CON 22 slides/DEF CON 22 - Hacking Conference Presentation Felix Leder - NinjaTV - Increasing Your Smart TVs IQ Without Bricking It - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 22/DEF CON 22 video and slides/DEF CON 22 - Felix Leder - NinjaTV - Increasing Your Smart TVs IQ Without Bricking It - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=Y0P1Lx5DRvE

Similar Presentations:

• DEF CON 17 (2009) / Hacking the Apple TV and Where your Forensic Data Lives
• Black Hat USA 2013 / Hacking, Surveilling, and Deceiving victims on Smart TV
• 30C3 (2013) / HbbTV Security: OMG - my Smart TV got pr0wn3d