IoT Village·20 min
Weihan Goh · ZhengChao Wen
Explains how a firmware flaw exposing LoRaWAN keys over NFC in industrial sensors grew into a fleet-scale disclosure and mitigation problem.
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 34DEF CON 34/IoT Village across years
Las Vegas Convention Center · 6–9 August 2026 · 9 talks
IoT Village talks from DEF CON 34.
1–9 of 9 talks
IoT Village·20 min
Weihan Goh · ZhengChao Wen
Explains how a firmware flaw exposing LoRaWAN keys over NFC in industrial sensors grew into a fleet-scale disclosure and mitigation problem.
IoT Village·40 min
Andrew Bellini
Shows how a beginner can use AI agents and a cheap bench rig to find and exploit bugs in consumer IoT firmware, using a router as the example.
IoT Village·39 min
Katie Paxton-Fear
Explores how e-readers from Kindle, Kobo, Android and low-cost ESP32 makers can be jailbroken, customized and reflashed with community firmware.
IoT Village·42 min
Larry Pesce
Shows how an AI agent driven by an IoT pentest playbook found and chained flaws in a webcam, and what humans must still validate.
IoT Village·24 min
Tony Turner
Explains how industrial organizations plan, roll out, and sustain OT network segmentation around maintenance limits, legacy systems, vendor control, and operator trust.
IoT Village·35 min
Simone Bossi · Luca Borzacchiello
Shows how to recover an encrypted IoT camera firmware by reusing the vendor's own decryption routines through targeted function emulation.
IoT Village·17 min
Metehan Arslan · Samet Berk Simsek
Shows how a cheap ESP32-C3 implant wired into a router's UART and power lines can give remote, persistent serial console access over wireless channels.
IoT Village·52 min
Carlota Bindner · Deral Heiland
Shows how the cellular modules inside IoT devices can be taken over through their unencrypted UART and USB links to reach backend cloud and private networks.
IoT Village·58 min
Naomi Brockwell
Shows how consumer IoT devices, apps and embedded SDKs hid surveillance until researchers took them apart, and why that scrutiny matters for privacy.