Tag
The author details how they decrypted Flume water monitor MQTT traffic by extracting a static 32-byte key from flash and using libhydrogen secretbox parameters, revealing that no session keys are involved despite noise key exchange code in firmware.
A detailed walkthrough of rooting a TP-Link TL-841N router via UART, dumping firmware through two methods, and uncovering hardcoded credentials that persist even after a factory reset, highlighting common IoT security weaknesses.
A security researcher analyzed the 915 MHz RF link of the Flume Water Monitor, successfully broke its encryption with moderate effort, and found the security reasonable for a consumer device.
Security researchers found that XCharge C6 EV chargers expose SSH and Telnet services with default root:root credentials over the CCS2 charging interface, enabling attackers to gain full control by connecting a malicious EV.
A developer reverse-engineers the RF remote of a Dreo cloud-controlled ceiling fan to enable local control via Home Assistant, bypassing cloud dependency and documenting the process of decoding and replaying commands.
D2H-AD is a novel anomaly detection framework using Hyperdimensional Computing (HDC) that combines distance-based and density-aware encoding. It outperforms five baselines across multiple benchmarks, offering lightweight, interpretable, and efficient performance for edge AI and IoT.
The author successfully repaired the Revo hubless bike, known as 'the world's worst e-bike,' through reverse engineering, cracking the Bluetooth password, and creating a custom screen, restoring all its functions and adding new features.
A researcher demonstrates that the Katana V2X Bluetooth speaker can be exploited over the air to flash malicious firmware and use USB HID emulation to execute commands on a connected PC, bypassing security and potentially allowing persistent compromise.
Discusses how AI systems often trust sensor inputs without validation, using an example of a logistics company where spoofed temperature sensor data led to cargo damage, and questions whether AI can detect such spoofing.
Mezz is a self-contained WiFi sandbox tool for inspecting IoT device traffic, providing an isolated network with DNS logging and optional MITM proxy, all deployable via Docker on a Linux host with AP-capable WiFi.
EdgeDetect is a federated intrusion detection system for 6G-IoT environments that combines importance-aware gradient binarization (32× compression) with Paillier homomorphic encryption to achieve 98% accuracy on CIC-IDS2017 while reducing communication overhead by 96.9% and enabling deployment on resource-constrained devices like Raspberry Pi 4.