DEF CON 25 - Matt Wixey - See no evil, hear no evil: Hacking invisibly & silently with light & sound

Traditional techniques for C2 channels, exfiltration, surveillance, and exploitation are often frustrated by the growing sophistication and prevalence of security protections, monitoring solutions, and controls. Whilst all is definitely not lost, from an attacker's perspective - we constantly see examples of attackers creatively bypassing such protections - it is always beneficial to have more weapons in one's arsenal, particularly when coming up against heavily-defended networks and highly-secured environments.
This talk demonstrates a number of techniques and attacks which leverage light and/or sound, using off-the-shelf hardware. It covers everything from C2 channels and exfiltration using light and near-ultrasonic sound, to disabling and disrupting motion detectors; from laser microphones, to repelling drones; from trolling friends, to jamming speech and demotivating malware analysts.
This talk not only provides attendees with a new suite of techniques and methodologies to consider when coming up against a well-defended target, but also demonstrates, in a hopefully fun and practical way, how these techniques work, their advantages, disadvantages, and possible future developments. It also gives details of real case studies where some of these techniques have been used, and provides defenders with realistic methods for the mitigation of these attacks.
Finally, the talk covers some ideas for future research in this area.

[@GhostsPlace]

This is actually one of the most underappreciated DEFCON talks.

[@Radi0he4d1]

How many hackers does it take to synch audio and video in post?

[@Gaxhar]

Very well done, especially for a first time presentation.

[@matthewwixey5909]

Twitch · thank you very much!

[@Cevans3535]

My favorite DEFCON talk of 2017. I really hope he returns next year with even more of these sorts of things.

[@matthewwixey5909]

Chris Evans Thanks Chris, really appreciate it.

[@TechyBen]

I hear the ultrasound... Where do I sign for Security jobs? ;)

[@ipoopmuffins]

It'd be great if he uploaded the audio to every single Gilmore Girls episode onto dejavu, that way whenever any part of the Gilmore Girls is playing it kills the TV.

[@semeeson]

rip ur ears if u can still hear ultrasonics, god thats an annoying sound

[@VikingRul3s]

Was that truely ultrasonic? Cause that was as cleare/louder then his voice! And no i'm not younger then him!

[@semeeson]

Vikings are better yeah that's ultra for you, could be a recording error? You eventually loose the ability to hear them

[@Radi0he4d1]

Isn't all youtube audio recorded as 192 kbps AAC? It's just 18 khz max or so, so no ultrasonics there thechnically :)

[@moth.monster]

@@Radi0he4d1 It's near ultrasonic. The frequencies start at 16khz. I could hear some of it, in my left ear.

[@kendokaaa]

All I hear is my tinnitus

[@confusedwolf7157]

agreed. most funky defcon output yet. and btw he is uk ...

[@churchofcryptos4781]

Where are the links for all this software???

[@skazigporo7742]

is there some documentation about this project?

[@tin2001]

15:55 - holy crap! I'm glad I'm not a headphones guy. That hurt!

[@royalaxe]

YAY someone pronounced soldering properly...

[@MobfigazGaming]

nice

[@matthewwixey5909]

BF3GOONZ Thank you!

[@dersg1freak]

16:57 still sounds like my phone charger. Still very impressive!

[@matthewwixey5909]

dersg1freak Thank you very much!

[@spectreanderson5971]

Whats the guys twitter?

[@Carambolero]

Have you watched till the end of the video?

[@larva5606]

P2D2C2P 😭

[@CU.SpaceCowboy]

i can hear it at 15:51, and its super annoying/irritating. Anyone hearing it will know something is wrong.
edit: I'm almost 30.

[@ChaceBonanno]

This is next level shit