The NSA Playset: RF Retroreflectors
Michael Ossmann explores the nsa playset: rf retroreflectors at DEF CON 22, examining hardware-security and practical defenses.
Summary
Architecture and Background
Extra materials available here: The NSA Playset: RF Retroreflectors Michael Ossmann GREAT SCOTT GADGETS Of all the technologies revealed in the NSA ANT catalog, perhaps the most exotic is the use of RF retroreflectors for over-the-air surveillance. These tiny implants, without any power supply, transmit information intercepted from digital or analog communications when irradiated by radio signals from an outside source.
Vulnerability Analysis
This modern class of radar eavesdropping technology has never been demonstrated in public before today. I've constructed and tested my own RF retroreflectors, and I'll show you how they work and how easy they are to build with modest soldering skills.
Exploitation and Demonstrations
I'll even bring along some fully assembled units to give away. Now you can add RF retroreflectors to your own NSA Playset and play along with the NSA!
Remediation and Defensive Strategies
Michael Ossmann is a wireless security researcher who makes hardware for hackers. Best known for the open source HackRF, Ubertooth, and Daisho projects, he founded Great Scott Gadgets in an effort to put exciting, new tools into the hands of innovative people.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·47 min
Pierce · Loki
Pierce and Loki explores nsa playset: gsm sniffing at DEF CON 22, examining hardware-security and practical defenses.
Main Stage·20 min
Jaeson Schultz
Jaeson Schultz explores examining the bitsquatting attack surface at DEF CON 21, examining hardware-security and practical defenses.