Hacking BLE Bicycle Locks for Fun and a Small Profit
Vincent Tan presents hacking ble bicycle locks for fun and a small profit: Hack a lock and get free rides!
Summary
Architecture and Background
Hack a lock and get free rides!
Vulnerability Analysis
(No free beer yet though...). This talk will explore the ever growing ride sharing economy and look at how the BLE "Smart" locks on shared bicycles work.
Exploitation and Demonstrations
The entire solution will be deconstructed and examined, from the mobile application to its supporting web services and finally communications with the lock. We will look at how to go about analysing communications between a mobile device and the lock, what works, what doesn't.
Remediation and Defensive Strategies
Previous talks on attacking BLE targeted the protocol itself using various hardware and software such as Ubertooth and Wireshark, which could be potentially difficult for someone new wanting to explore BLE and the ever connected IoT world. I'll simplify and stupidify the entire process such that anyone with a mobile phone and basic experience with Frida can go about breaking locks and hacking BLE the world over.
Related talks
Main Stage·42 min
Ladar Levison · hon1nbo
Ladar Levison and hon1nbo presents booby trapping boxes: Ever worry about the hardware you leave behind?
Main Stage·33 min
Bui · Rao
Bui and Rao presents last mile authentication problem exploiting the missing link: With "Trust none over the Internet" mindset, securing all communication between a client and a server with protocols such as TLS has...
Main Stage·46 min
Douglas McKee
Douglas McKee presents 80 to 0 in under 5 seconds: It seems each day that passes brings new technology and an increasing dependence upon it.