AAPL Automated Analog Telephone Logging
Da Beave and JFalcon explores aapl automated analog telephone logging at DEF CON 17, examining hardware-security and practical defenses.
Summary
Architecture and Background
AAPL- Automated Analog Telephone Logging Da Beave Security Researcher JFalcon Security Researcher Since 1983 when Hollywood introduced "Wardialing" to the public, there has been little change in the methods involved. While some pieces of hardware attempted to take it beyond what was essentially a telephonic "ping" scan, the methods and technology didn't maintain that momentum. However, thanks to modern computing and open source software tools, we are now able to cartograph an entire phone exchange in one pass while discerning voice, tones, faxes and modems.
Vulnerability Analysis
With some creative processing, it might be taken even farther into speech recognition Da Beave (Champ Clark III) is one of the founding members of the VoIP hobbyist group "Telephreak." He also co-authored Asterisk Hacking and brought the OpenVMS Deathrow Cluster into existence. He is currently employed with Softwink, Inc., which specializes in security monitoring within the financial industry. Da Beave has authored various security utilities including iWar, tscan/dscan (X.25), and others.
Exploitation and Demonstrations
JFalcon has been involved in the scene for almost two decades. He also has the claim to fame of being the first federally convicted computer hacker in the State of Alaska during Operation: Sundevil (1991-1995). Since his release in 1996, he has professionally consulted businesses and business executives in their own security needs along with being a senior system administrator to Fortune 500 companies and U.S.
Remediation and Defensive Strategies
government agencies. Currently, JFalcon maintains his passion for finding unique solutions to today's problems by studying the past, from running his own hybrid BBS system to see how it could compete with social network websites to designing his own robotic antenna controls for his radio gear to studying people's real experiments into hydrogen fuels. He currently calls Seattle his home. For copies of the slides and additional materials please see the DEF CON 17 Archive here:
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·47 min
Michael Ossmann
Michael Ossmann explores the nsa playset: rf retroreflectors at DEF CON 22, examining hardware-security and practical defenses.
Main Stage·47 min
Pierce · Loki
Pierce and Loki explores nsa playset: gsm sniffing at DEF CON 22, examining hardware-security and practical defenses.