Extracting the Painful (blue)tooth

Presented at DEF CON 23 (2015), Aug. 8, 2015, 2 p.m. (60 minutes).

Do you know how many Bluetooth-enabled devices are currently present in the world? With the beginning of the IoT (Internet of Things) and Smart Bluetooth (Low energy) we find in our hands almost a zillion of them. Are they secure? What if I tell you I can unlock your Smartphone? What if I tell you I'm able to open the new shiny SmartLock you are using to secure your house's door? In this talk we will explain briefly how the Bluetooth (BDR/EDR/LE) protocols work, focusing on security aspects. We will show then some known vulnerabilities and finally we will consider deeply undisclosed ones, even with live demonstrations.

Presenters:

• Matteo Beccaro / bughardy   as Matteo Beccaro
  Matteo Beccaro is a young security researcher. His interest focus on WiFi networks, networking and NFC implementations. He finished high school studies in July 2013 and actually he is a student at Politecnico di Torino in Computer Engineering course. He has been selected as speaker at DEF CON 21, 30C3, BlackHat US Arsenal, DEF CON 22's Skytalks and BlackHat EU 2014 and Tetcon, for his research in vulnerabilities of NFC transport systems. Since 2013 he is also pentester and security engineer at Secure Network s.r.l. Since 2015 he is also technical leader of the Security Research Team of OPFOR, the physical security division of Secure Network s.r.l. Twitter: @_bughardy_
• Matteo Collura / Eagle1753   as Matteo Collura
  Matteo Collura is a student of Electronics Engineering at Politecnico di Torino. He has been studying Wireless networks and in the last few years he focused on NFC. He presented the results of a progressive work of research at several conferences: DEF CON 21 (Las Vegas, 2013), 30C3 (Hamburg 2013), DEF CON Skytalks (Las Vegas, 2014), BlackHat USA 2014 Arsenal (Las Vegas). Currently he is studying Bluetooth protocols and their implementations. Twitter: @eagle1753

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Beccaro
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Video and Slides.mp4 (Video and Slides)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Beccaro and Collura - Extracting the Painful blue-tooth - Video.srt (subtitles)
• https://www.youtube.com/watch?v=UAFddrsqnQY

Similar Presentations:

• DEF CON 24 (2016) / Realtime Bluetooth Device Detection with Blue Hydra
• DEF CON 18 (2010) / Breaking Bluetooth By Being Bored
• ShmooCon IX (2013) / How Smart Is Bluetooth Smart?