smea - Adventures In Smart Buttplug Penetration Testing
A thorough security analysis of internet-connected intimate devices revealing Bluetooth vulnerabilities, insecure APIs, and privacy failures.
Summary
Security Research: Connected Intimate Devices
smea (security researcher, known for Nintendo 3DS research) presents comprehensive security research on Bluetooth-connected intimate devices — an underexamined IoT category with unique privacy sensitivity.
Device Architecture Analysis
The research covers multiple popular devices from major manufacturers, analyzing their Bluetooth LE protocol implementations, companion mobile applications, and cloud connectivity features. All devices are disassembled for hardware analysis and firmware extraction.
Bluetooth Vulnerabilities
Critical findings include: unauthenticated BLE connections allowing any nearby device to take control, replay attacks that bypass authentication challenges, and trivial brute-force of 4-digit numeric pairing codes across all tested devices.
Privacy and Security Implications
Companion apps transmit usage telemetry, session duration logs, and device control events to cloud servers without user notice. smea demonstrates capturing this data through MitM interception, revealing detailed intimate behavior patterns. The talk advocates for significantly stronger privacy standards in this device category.
Related talks
Main Stage·40 min
Reynaldo · nyx
Reverse engineers commercial vape and sound monitoring sensors installed in school restrooms, uncovering unauthenticated telemetry feeds and cloud vulnerabilities.
Main Stage·24 min
Jiska Classen
Reverse engineers robot vacuum cleaners to reveal camera surveillance capabilities, Bluetooth vulnerabilities, and cloud data exposure.
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.