logo FEDIDEVS

39c3 2025

Day 2 (361)

Und der passende Film zum „Digitaler Unabhängigkeitstag“ für die @tagesschau.

Finde es eine super Idee, gleich heute Morgen meinen ohnehin stillgelegten X Account gelöscht. Habt ihr auch schon was gelöscht? Oder umgezogen? Schreibt es mir, bin neugierig 🤓 mit @linuzifer @marcuwekling

166 136 39

Gleichmal umgesetzt. X-Account deaktiviert. War sowieso stillgelegt. Aber jetzt bin ich da raus. War schon lange vorbei. Schade irgendwie immernoch.

417 86 22

The "Bluetooth Headphone Jacking" talk at was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.

They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the address and "master" encryption keys used for the communication with paired devices (e.g. a ).

Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).
The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.

Then they started recovering access a account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.

As the cherry on top, they escalated into the victim's account.

Scary shit.

47 37 0

Barrierefreiheit in der Praxis. Eine Teppichspur gegen Glatteis vor dem . Aber die Leithilfe für Sehbehinderte bleibt frei.

53 22 1

👉 Souvenirs 👈

Kommt in Saal X und bemalt euren eigenen Kühlschrankmagneten!

Come by in Saal X and paint your own fridge magnet!

39c3.c3nav.de/l/c:1:214.98:174

mastodon.social/@zichy/1157914

38 21 0

Poly ist auf dem in unterwegs und freut sich auf nette Begegnungen.
Im übrigen: Wir halten an Tag 3 auch einen Talk owi kommt vorbei.

59 19 1

Thanks to @pluralistic for his awesome talk at !!

You gave us hope in our shared fight for a world where general-purpose computers can be tinkered with for users’ rights, not controlled by monopolistic companies.💪

As he said on stage : join our fight towards , support our work so we can contribute to break this wall for a better world 😉

fsfe.org/donate

18 19 1