MEET THE HACKER con Fede Pacheco I T01E19 I Juani Bousquet

### Overview In this episode of "Meet the Hacker," host Fede Pacheco interviews security instructor and practitioner Juani Bousquet. The conversation explores Bousquet's non-linear career path, originating in early hardware tinkering, community BBS and 2600 meetings, and early virus encyclopedias, transitioning into film, visual effects, and 3D rendering, before returning full-circle to computer security and physical penetration testing. Bousquet discusses the core philosophy of offensive physical security, the mindset necessary for learning technology, and future pursuits in cryptography and aerospace security.

### Key Topics - **Early Beginnings and Community:** Bousquet recounts early experiences with a 286 and later 486 PC, exploring dial-up text files, computer magazines with virus encyclopedias, and attending classic 2600 meetings in San José, Argentina, along with participating in the local hacker ecosystem. - **Non-Linear Career Trajectory:** Rather than following a conventional computer engineering degree, Bousquet studied film and worked in visual effects, automation, and rendering. Security re-entered his professional life through the need to protect sensitive unreleased movie footage and production studio infrastructure against physical and digital leaks. - **Physical and Hardware Security:** A focus on tangible barriers, including mechanical lock picking, handcuff bypassing, biometric and fingerprint reader tampering, radio frequencies (RF), and camera systems. Bousquet explains how physical access often serves as the initial vulnerability that compromises digital infrastructure. - **Education and Mindset:** Teaching practical physical security courses, delivering live attack demonstrations (such as spoofing remote control RF signals or evaluating car locks), and encouraging learners to experiment, build tools, break systems, and learn from mistakes.

### Technical Details - **Physical Entry and Lock Mechanisms:** Bousquet highlights how standard cylinder locks frequently guard high-value assets such as servers, where physical compromise directly enables malicious USB insertion or local access. Reference is made to the publicly available CIA lock picking manual, lock-picking tools, and fingerprint replication. - **Radio Frequency (RF) and Signals:** Leveraging amateur radio background to analyze and clone RF signals (such as Coesys remote controls) and assessing denial-of-service impacts against automotive or facility wireless access mechanisms. - **Hardware and IoT Interfacing:** Modifying physical authentication hardware (e.g., fingerprint scanners) and understanding how physical layers interface with digital logic across networks, Wi-Fi, and custom firmware.

### Takeaways - **Curiosity and Hands-On Practice:** The most durable skill in security is persistent curiosity combined with a willingness to take things apart, break them, and rebuild them. - **Importance of Physical Security:** Digital defenses are insufficient if physical controls (locks, badges, access panels) are trivial to bypass; physical penetration testing remains an under-exploited but critical discipline. - **Networking and Continuous Growth:** Beginners are encouraged to attend conferences, give talks, network actively on platforms like LinkedIn and Twitter, and embrace non-traditional backgrounds, with Bousquet noting his upcoming master's studies focusing on cryptography and aerospace security.