Caleb Mays and Ben Ramsey

### Insteon Home Automation and Dual-Mesh Design At 00:00, Caleb Mays introduces his research reverse engineering the Insteon home automation protocol, titled "Inste-On, Inste-Off, Inste-Open." At 03:16, he explains Insteon's proprietary dual-mesh architecture, which coordinates devices via both 915 MHz RF signals and high-frequency powerline carrier pulses. Despite its widespread deployment in commercial hubs, light switches, and thermostats, the wireless RF specifications were largely proprietary and poorly documented.

### RF Parameter Verification and Frequency Corrections At 04:46, Mays shares the technical challenges of reconciling vendor documentation with actual over-the-air signals. After discovering inconsistencies in published RF deviation and Manchester encoding parameters, he contacted engineers to verify RF specifications. At 06:18, he demonstrates calibrating receiver frequencies and bandwidth settings, successfully capturing clean FSK modulated packets at 915 MHz using Software Defined Radio (SDR) hardware.

### Demodulation Pipelines and GNU Radio Flowgraphs At 07:49, Mays details how he designed GNU Radio flowgraphs and Python signal processing blocks to process raw I/Q samples from HackRF and RTL-SDR hardware. The custom pipeline performs clock recovery, FSK symbol slicing, and packet reconstruction, parsing the Insteon physical frame structure comprising preamble bits, sync words, sender/receiver addresses, message flags, and opcode payloads.

### Live Wireshark Dissection and Traffic Analysis At 09:20 and 12:21, Mays showcases a custom packet sink that streams decoded Insteon frames directly into Wireshark in real time. Demonstrating live traffic between a hub and smart lighting devices in the room (at 13:54), he inspects hop counts, acknowledgment flags, and standard command bytes, such as `0x11` for turning switches on and `0x13` for turning them off, proving full protocol visibility.

### Packet Spoofing and Cross-Medium Injection At 16:56, Mays reveals a significant architectural vulnerability: because Insteon bridges wireless RF messages onto household electrical wiring (and vice versa), injecting spoofed RF packets allows an adversary outside the building to trigger powerline-connected devices inside. At 18:28, he demonstrates spoofing legitimate device IDs to actuate electrical switches without authentication, underscoring the necessity of cryptographic integrity in home automation networks.

(AI summary — Gemini 3.8 Flash)