Unmasking the Snitch Puck: IoT Surveillance Tech in the School Bathroom
Reverse engineers commercial vape and sound monitoring sensors installed in school restrooms, uncovering unauthenticated telemetry feeds and cloud vulnerabilities.
Summary
The Rise of Environmental IoT Monitoring
Schools increasingly deploy connected sensor pucks in restrooms and private areas to monitor vaping, noise anomalies, and aggressive behavior, raising significant privacy and surveillance concerns.
Hardware Teardown and Sensor Extraction
Reynaldo and nyx tear down popular commercial sensor devices, reverse engineering their microcontrollers, microphone arrays, and optical smoke detection hardware.
Insecure Cloud Communication and Audio Leakage
Analyzing network traffic and firmware reveals unencrypted telemetry broadcasts, unauthenticated cloud API endpoints, and potential raw audio stream exposure over local Wi-Fi networks.
Ethical and Privacy Dimensions of Campus Surveillance
Evaluating school surveillance technology underscores the necessity of transparency, data minimization, and rigorous independent hardware security assessments in educational institutions.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.
Main Stage·39 min
Octavio Gianatiempo · Octavio Galland
Octavio Gianatiempo and Octavio Galland audit top-selling consumer routers, discovering systemic OEM firmware vulnerabilities that enable zero-click remote RCE.


