3 ms·
I remember reading an obsecure paper hacking a smart TV through the radio antenna after which WiFi could be turned on. It was a work of art and sounded almost
by CommanderData 7y ago
I remember reading an obsecure paper hacking a smart TV through the radio antenna after which WiFi could be turned on.
It was a work of art and sounded almost fictional. In the end the attacker would turn on WiFi and control the TV for not just one, any TV in radius, or execute a payload to connect back to a CnC for tvs out of range. It would work even if the TV was in standby.
Patching this particular vuln would have been difficult, though the attacker would have to craft a payload specific to the make and model. It's a nice example where adding features increases attack surface, and protecting against such hacks even for the experienced is near impossible.
Would make for a good HN submission.
- jethro_tell 7y agoMan, If you have any clues about where this could be found or any other info I'd really appreciate it. I'd love to read this.
- CommanderData 7y agoFound. Did get some coverage in the end. PoC: https://www.youtube.com/watch?v=bOJ_8QHX6OA https://www.youtube.com/watch?v=bOJ_8QHX6OA DVB standards updated their specification after the disclosure too. [1] DVB announcement: https://www.dvb.org/resources/public/pressreleases/dvb_pr263_steering_board_approves_updates_to_prevent_man_in_the_middle_attacks_final.pdf https://www.dvb.org/resources/public/pressreleases/dvb_pr263... Someone found another vulnerability using the same vector - will post if I can find it.