$ grep -l "tag:research" writing/
tag: research.
4 pieces tagged research, newest first. The full taxonomy is on the tag index.
2021·08·21
wlan0: the unlocked back door on every TV Part 4 of 4. Once you have root on the TV, the most useful thing on the device isn't the data on it — it's the second network interface nobody disabled. What this bypasses, why the SIEM is blind to it, and what to do about it. hbbtv · iot · network · defence · research
10 min
2021·07·17
From the embedded browser to a shell on a smart TV Part 3 of 4. From the AIT-triggered page load to a shell prompt. CVE-2020-6383, shell.js, SMACK, and the public Samsung Q60T root chain. hbbtv · chromium · v8 · tizen · smacks · research
11 min
2021·06·19
The lab rig: re-broadcasting HbbTV into a test bench Part 2 of 4. What I built on the bench to study HbbTV attacks safely. Hardware, software, the AIT injection step, and the legal bit (do not transmit DVB into open air). hbbtv · sdr · dvb · lab · research
9 min
2021·05·22
The TV in the corner: what HbbTV actually is Part 1 of 4. A primer on HbbTV from a security researcher's bench. Why I think the smart TV mounted on the meeting-room wall is the most under-considered attack surface in any UK office in 2021. hbbtv · iot · embedded · research · smarttv
7 min
→ all tags · all writing