Pwnd Blaster: Hacking your PC using your speaker without ever touching it
1–10 of 133 posts
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#2Can't wait to see a video from a half sloppy channel about this on my youtube front page in roughly 4 business days
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#3Good work, and fun to read.
It's crazy that companies just stick their head in the sand, when confronted with serious security issues.
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#4>Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk."
So wirelessly writing custom firmware to someone else's device that is connected via USB to their computer without even needing to pair is not a security vulnerability. Yea.
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#5>Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk." So wirelessly writing custom firmware to someone else's device that is connected via USB to their computer without even needing to pair is not a security vulnerability. Yea.
AND being able to further reprogram the device to gain control of the PC.
This is negligence of the highest kind.
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#6>Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk." So wirelessly writing custom firmware to someone else's device that is connected via USB to their computer without even needing to pair is not a security vulnerability. Yea.
"You can just make it type words, what's the risk in that?"
Makes you wonder what other peripheral companies out there are also operating with seemingly no security team. There must be other vulnerabilities like this just waiting to be discovered.
My brother was awoken one morning at 2am because some neighborhood kids connected to his bluetooth speaker and blasted fart sounds on loop at max volume, and that's literally only the absolute tippy top of the malicious bluetooth use iceberg.
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#7The fact that the author had to publish a third-party patch because the vendor didn't consider it a vulnerability is not a great look
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#8>Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk." So wirelessly writing custom firmware to someone else's device that is connected via USB to their computer without even needing to pair is not a security vulnerability. Yea.
"You can just make it type words, what's the risk in that?" Makes you wonder what other peripheral companies out there are also operating with seemingly no security team. There must be other vulnerabilities like this just waiting to be discovered. My brother was awoken one morning at 2am because some neighborhood kids connected to his bluetooth speaker and blasted fart sounds on loop at max volume, and that's literal…
Oh yeah, for some reason the companies with the highest risk products seem to be the ones that care less about security. Don't even get me started with "smart" bulbs and cameras that each individually connect to your local network and the Internet. You have 5 lightbulbs? That's 5 different devices you need to track, keep updated and trust the in the vendor firmware's security.
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#9>Email from SingCERT stating vendor "do not consider this to be a vulnerability, as it does not present a cybersecurity risk." So wirelessly writing custom firmware to someone else's device that is connected via USB to their computer without even needing to pair is not a security vulnerability. Yea.
The vendor response is the more worrying part
Re: Pwnd Blaster: Hacking your PC using your speaker without ever touching it
#10Can't wait to see a video from a half sloppy channel about this on my youtube front page in roughly 4 business days
I guess you can still be first to Linkedin and get all of the fame.