Travel Security - Viewing Risks Through the Eyes of a Hacker
Where
Physical Security Village
DEF CON 34
Duration
56 min
Shows how everyday travel habits, from hotel check-in and badges to card payments and room doors, expose people to theft and intrusion, with practical countermeasures.
Summary
The presenters, who run red-team and covert-entry engagements, open by saying the talk is about awareness rather than paranoia. Their point is that travelers, including government and corporate staff, become easy targets through predictable habits: distracted walking, open bags, visible lanyards and badges, and saying room numbers aloud. They describe how thieves and social engineers look for people who seem overloaded or low on attention, and how a polite request at a hotel desk can lead to a new room key or charges added to a guest room.
The middle of the talk covers hotel-room and physical weaknesses. They demonstrate under-the-door tools that work through gaps around lever handles, chain locks that can be bypassed, doors that do not latch fully, weak hotel safes, and balcony doors. They also cover badge cloning with cheap readers, card skimmers used on cards left on tables, shoulder surfing on laptops, and tampered charging cables. Countermeasures include door straps, blocking handle gaps, tape or tea-bag tamper traps, and cheap RF and infrared detectors for spotting hidden cameras, which they say are imperfect but useful as a starting point.
They close with a short set of habits: keep payment cards and room details under your control, pack light, know the exits, document anything suspicious with photos, and check your belongings before leaving a room. The core message is to stay mindful of your surroundings and to recognize how an attacker would think about your routine.
Materials
Related talks
Crypto Privacy Village·41 min
Patrick Walsh
Shows how an attacker can slowly poison an OpenClaw-style AI agent's memory through repeated emails until it forwards the victim's mail out.
HackersTown·30 min
AltKey
Shows how technologists can use Monero to pay for goods and services without KYC checks, and which correlation attacks and mitigations matter.
Physical Security Village·25 min
Champ
Shows how internet-exposed access control panels with numeric-only passcodes and no rate limiting let remote attackers unlock doors and pull resident data.


