The Big Rick: How I Rickrolled My High School District & Got Away With It
High school student Minh Duong shares how he orchestrated a synchronized district-wide Rickroll across six high schools by exploiting networked IPTV projectors.
Summary
The Setup: Networked Projectors and High School Curiosity
High school district networks often suffer from flat network topologies, default credentials, and unsegmented IoT devices accessible from student Wi-Fi.
Discovering Vulnerabilities in Networked Projectors and IPTV
Minh Duong demonstrates mapping district subnets, uncovering unauthenticated web interfaces, exposed Telnet ports, and universal broadcast APIs on classroom display devices.
Orchestrating the Synchronized Multi-School Rickroll
Duong explains writing automated Python scripts to synchronize video playback and volume control across hundreds of displays simultaneously right before the morning bell.
Responsible Disclosure and Administrative Reactions
The presentation highlights how Duong prepared a comprehensive 26-page vulnerability report, resulting in district-wide network hardening and praise from school administrators.
Related talks
IoT Village·44 min
Daniel Wegemer
We will show how the Fitbit ecosystem works based on the Fitbit Flex and Fitbit Charge HR as well as the Fitbit Ionic smartwatch. We also show how we modified the firmware of the Fitbit Flex and discuss several vulner...
IoT Village·41 min
Veronica Schmitt
There are advancements made on a daily basis, with regards to medical implantable devices. These devices offer life extensions when organic systems fail. Are these systems secured? There are shocking amounts of vulner...
IoT Village·27 min
Ramgattie and Holcomb
The origins of the SOHOpelessly broken research and some of the new research from our new research lab.