Brain Waves Surfing: (In)security in EEG Technologies
Alejandro Hernández audits commercial EEG headsets and Brain-Computer Interfaces (BCIs), demonstrating radio eavesdropping and subliminal P300 biometric probing.
Summary
The Emergence of Consumer Brain-Computer Interfaces (BCIs)
Commercial Electroencephalography (EEG) headsets allow users to control applications, monitor mental focus, and authenticate using brainwave telemetry.
Auditing Wireless EEG Communication Protocols
Alejandro Hernández analyzes consumer EEG headsets, discovering unencrypted Bluetooth streams leaking raw electrical brainwave signals to nearby eavesdroppers.
Subliminal P300 Biometric Probing Attacks
Hernández demonstrates how displaying rapid visual stimuli triggers characteristic P300 brainwave responses, allowing an attacker to deduce PIN codes and recognized faces.
Neurosecurity Hardening and Data Privacy
The author advocates for cryptographic encryption on neuro-telemetry streams, operating system access controls for brainwave feeds, and privacy regulations.
Related talks
Main Stage·41 min
Katherine Pratt
Explores security and privacy vulnerabilities in consumer EEG brain-computer interfaces used for meditation, gaming, and attention measurement.
Village Presentations·30 min
Christian Dameff · Jeff Tully · Peter Hefley
Physicians Christian Dameff and Jeff Tully join biohacker Peter Hefley to analyze the surgical safety, biocompatibility, and ethics of DIY subdermal implants.
Village Presentations·24 min
Keoni Gandall
Synthetic biology researcher Keoni Gandall demonstrates designing, assembling, and transforming synthetic DNA in a home laboratory setting.