Can you hear me now DEF CON
RF communications using commodity SDR hardware for secure backchannel communications in security research.
Summary
### Practical Sub-Gigahertz and Proprietary RF Operations At 00:00, wireless security researcher Wasabi opens a practical field guide at the Wireless Village, exploring reconnaissance and offensive operations across sub-gigahertz and proprietary non-Wi-Fi radio spectrums.
### SDR Hardware Selection for Field Engagements At 07:01, Wasabi evaluates software-defined radio (SDR) platforms for field portability. He compares devices like the RTL-SDR, HackRF One, and Yard Stick One, examining antenna selection, frequency ranges, and power management constraints during mobile operations.
### RF Range Benchmarking Across Urban Environments At 14:02, the speaker presents empirical signal propagation testing. Evaluating 315 MHz, 433 MHz, and 915 MHz transceivers, he illustrates how lower frequencies penetrate reinforced concrete walls and urban structures far more effectively than standard 2.4 GHz Wi-Fi.
### Low-Power IoT and Telemetry Protocol Analysis At 21:00, the presentation examines industrial wireless protocols, including LoRa, Sigfox, and proprietary smart metering standards. Wasabi details how these architectures achieve multi-kilometer range with minimal power consumption (10-20mA receive), making them ideal for covert telemetry.
### Mesh Relaying and Covert Field Deployments Concluding between 28:01 and 35:01, Wasabi demonstrates mesh relay tactics. Compromising an intermediate ZigBee or sub-GHz node allows red teams to hop communications across physical perimeters, and he provides guidelines for weatherproofing autonomous, solar-recharged RF listening posts.
(AI summary — Gemini Flash)
Related talks
Wireless Village·21 min
recompiler
Talk will focus on privacy (or lack thereof) of gotenna networks. We will cover traditional attacks which have only been available to state sponsored prior to popularization and wide availability of software defined r...
Wireless Village·46 min
m1n1
We performed a case study with the most basic attack profile: the bad BSSID is known and the blue team is searching for the physical device, which is on the move. The theater was the DEFCON 26 wireless CTF. Since we d...
Wireless Village·38 min
Lennart Koopmann
In this talk, I am explaining and releasing v1.0.0 of nzyme after 2 years of work. Nzyme is a new and Open Source WiFi IDS that addresses challenges of wireless security by employing deception techniques, fingerprinti...


