Attacking Gotenna Networks

### Security Architecture of Off-Grid Mesh Devices At 00:00, Vlad (Recompiler) presents vulnerability research targeting goTenna mesh radio devices, which enable off-grid text messaging and GPS sharing over VHF/UHF frequencies when cellular networks are unavailable.

### Decentralized Mesh Routing and APRS Tracking At 04:02, the speaker explains the operational workflow of mobile mesh communications. Pairing with smartphones via Bluetooth Low Energy, goTenna units form ad-hoc multi-hop mesh networks, utilizing Automatic Packet Reporting System (APRS) protocols for emergency location beacons.

### Mobile App Cryptographic Key Storage Weaknesses At 08:00, Vlad exposes implementation flaws in the goTenna mobile companion software. Reverse-engineering the application revealed that private encryption keys and device identity tokens were stored in unencrypted local application storage, allowing extraction and device impersonation.

### Protocol Fuzzing and Denial-of-Service At 12:03 and 16:00, the presentation details protocol fuzzing methodologies. By broadcasting malformed packets over radio frequencies, researchers identified memory corruption bugs that caused unhandled exceptions in neighboring nodes, effectively disabling localized emergency communications.

### Identity Spoofing in Offline Environments Concluding at 20:05, Vlad highlights the challenge of trust in offline environments. Without a central certificate authority to validate identities, adversaries can broadcast spoofed GID identifiers, impersonating trusted contacts or injecting deceptive location coordinates across decentralized mesh networks.

(AI summary — Gemini Flash)