Why Does My Security Camera Scream Like a Banshee?
Rion Carter reverse engineers low-cost consumer security cameras, uncovering unauthenticated audio injection flaws and remote firmware takeover vectors.
Summary
The Rapid Adoption of Smart Security Cameras
Connected consumer security cameras offer live streaming, two-way audio intercoms, and cloud storage, but frequently prioritize convenience over foundational security.
Hardware Teardown and Firmware Extraction
Rion Carter disassembles budget IP cameras, extracting SPI flash memory chips and dumping Linux root filesystems via UART serial consoles.
Discovering Unauthenticated Audio and Remote RCE Flaws
Auditing proprietary UDP audio daemons reveals missing authentication checks that allow attackers on the local network to blast arbitrary audio and execute root shellcode.
Securing IoT Connected Devices
The author provides device isolation guidelines for smart home users and recommendations for camera vendors to enforce encrypted audio channels.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Creator Stage·28 min
Justin Mott · Ava Petersen
Documents finding nine zero-day vulnerabilities in Vilo consumer home routers through UART interfacing, firmware reversing, and protocol analysis.