Meshtastic Attacktastic

Meshtastic is an open-source platform for off-grid, long-range mesh messaging over LoRa radio, controlled from a phone app. The speaker explains how nodes relay messages hop by hop, where people use it on backcountry trips and during emergencies, and why the low-power hardware is cheap to deploy. The talk then turns to weak spots: small devices that can be stolen or hard to reach, GPS beaconing that reveals where a node sits and traces a person's movements, a default channel with trivial encryption, and shared private keys that are never rotated.

The main demonstration shows a dongle-based rig planted near a target. It relays commands over the mesh to a nearby machine, which then gets driven like a keyboard once a malicious USB device is plugged in. The speaker built on work by a colleague, framed it as educational, and noted that two antivirus products had to be removed before it would run. The demo opened calculator and Notepad on a Windows machine from a phone.

The closing advice is practical. Lock down physical access and use tamper-evident hardware. Prefer stronger keys, and manage them through a rotated, centrally generated source rather than passing a static key around. Turn off GPS when it is not needed, watch for rogue access points with wireless intrusion detection, keep firmware patched, and block USB ports.