Let's Get Physical! Opportunities for Harm in the Physical Web

Presented at ToorCon San Diego 17 (2015), Oct. 25, 2015, 3 p.m. (20 minutes)

The “Physical Web” is approaching quickly! With Google’s recent Eddystone offering, market adoption of bluetooth low energy (BLE) beacons will increase rapidly, bringing new opportunities for commerce and of course, new opportunities for mischief and harm. This talk introduces beacons with live demonstration, reviews current risks in common beacon provider offerings, and predicts some malicious behavior we can expect with beacons. We’ll also consider possible remediations based on other historical precedents. *Note: If you’re an iOS user, you’ll get more out of this talk if you’ve installed Google Chrome on your device.*

Presenters:

• Caleb Queern / @HttpSecHeaders
  Caleb Queern is a web application security researcher and board member of the San Diego OWASP chapter.