Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit
Darkred explores not-so-limited warranty: target attacks on warranties for fun and profit at DEF CON 20, examining hardware-security and practical defenses.
Summary
Architecture and Background
Copy of the slides for this talk are here: Not-So-Limited Warranty: Target Attacks on Warranties for Fun and Profit Darkred Frequently people consider a serial number as nothing but a number but in this presentation you will be shown the multitude of ways in which an attacker could utilize serial numbers to hurt you,to hurt companies as well as to track your movements. A brief primer on the function and use of serial numbers in the real world will be provided.
Vulnerability Analysis
Focusing on Apple, Amazon and Pringles and providing in-depth insight into the varying degrees of trust a serial number will gain you. Attack vectors ranging from Apple to Pringles and everywhere in between along with points about how to prevent similar tragedies from occurring with your product.
Exploitation and Demonstrations
Darkred is a high-school student currently residing in the United States. In his free time, he enjoys testing the vulnerabilities of companies' security and warranty policies.
Remediation and Defensive Strategies
He does this in order to make said companies aware of serious flaws in their policies. His tests range from High Value Electronics to free coupons for soda and chips. With this information, he hopes that big companies like Apple can protect their warranty policies and their consumers.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·47 min
Michael Ossmann
Michael Ossmann explores the nsa playset: rf retroreflectors at DEF CON 22, examining hardware-security and practical defenses.
Main Stage·47 min
Pierce · Loki
Pierce and Loki explores nsa playset: gsm sniffing at DEF CON 22, examining hardware-security and practical defenses.


