44con 2014 - hot or not, the hacker way, dan tentler
DESCRIPTION
44CON 2014 - Hot or not, the hacker way, Dan Tentler Thermal imaging has been a subject that not many people get the opportunity to research, without an exceedingly high number of dollars on the table. This pet project of mine began in 2010 when I asked FLIR for a demo unit to do a series of tests in an effort to see how infrared could be used in the world of information security. Their PR people replied to me saying that they didn’t think a FLIR device could be used to read heat signatures from a computer because they weren’t sensitive enough. This year I got my hands on a FLIR E4, and hacked it to have 4x the resolution. Boy was that PR guy wrong.TRANSCRIPT
![Page 1: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/1.jpg)
Hot or not The hacker way
One nerd, a flir e4, and monkey island syndrome.
![Page 2: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/2.jpg)
Hot or not The hacker way
One nerd, a flir e4, and monkey island syndrome.
I had an epiphany: Infosec is
Monkey Island.To win, just rub everything against everything else
![Page 3: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/3.jpg)
Hot or not The hacker way
One nerd, a flir e4, and monkey island syndrome.
![Page 4: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/4.jpg)
I’m @Viss
Dan Tentler ——
• Co-Founder, Carbon Dynamics • Sysadmin / Architect:: 10 years • Security engineering / pentest / redteam:: 8 years • Done some talks • Got some press • etc.. my resume isn’t important. • I know, I know “we don’t care about you, get to the TOYS :D”
![Page 5: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/5.jpg)
Who never thought this was cool?
![Page 6: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/6.jpg)
It used to be SUPER expensive
![Page 7: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/7.jpg)
Con organizer powers go!
![Page 8: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/8.jpg)
#facepalm
![Page 9: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/9.jpg)
Sorry, Haley.
![Page 10: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/10.jpg)
Okay, wait.. how did you do that?
![Page 11: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/11.jpg)
Okay, wait.. how did you do that?
![Page 12: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/12.jpg)
![Page 13: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/13.jpg)
Yes, a bunch of EE nerds reverse-engineered
the flir E4.
![Page 14: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/14.jpg)
This is how I imagine flir:
(or at least, I would hope)
![Page 15: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/15.jpg)
Then pretty much it was this
![Page 16: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/16.jpg)
First finding of note
80x60 320x240
Math = 16x more res.
![Page 17: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/17.jpg)
Second finding of note
Unlock new modes
![Page 18: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/18.jpg)
TL;DR
Flir E4 - ~$1000 US !
Flir E8 - ~$7000 US
Though the E8 has wifi, video more bells and whistles…
![Page 19: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/19.jpg)
• Lockpicking • Wireless networking/cracking • CPU/GPU/Cracking etc • Networking • .. more stuff like that
On to the meat.
![Page 20: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/20.jpg)
One is doing evil.
Buuuut, you can’t really tell :(
![Page 21: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/21.jpg)
Raspi!
![Page 22: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/22.jpg)
Lockpicking
![Page 23: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/23.jpg)
Wireless
(wep is pretty much dead so this becomes kind of moot)
![Page 24: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/24.jpg)
Wireless
![Page 25: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/25.jpg)
Sigh.
![Page 26: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/26.jpg)
But .. surprises!
![Page 27: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/27.jpg)
As it turns out..
They’re kinda glorious for redteam engagements.
![Page 28: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/28.jpg)
Cameras!
From the business end, this time
![Page 29: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/29.jpg)
Cameras!
![Page 30: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/30.jpg)
Cameras!
![Page 31: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/31.jpg)
Cameras on the same lan?
![Page 32: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/32.jpg)
Cameras!
![Page 33: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/33.jpg)
Cars!
![Page 34: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/34.jpg)
Cars!
![Page 35: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/35.jpg)
What do you see?
![Page 36: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/36.jpg)
What do you see?
![Page 37: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/37.jpg)
A better view
![Page 38: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/38.jpg)
A better view
![Page 39: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/39.jpg)
Some editorial..
![Page 40: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/40.jpg)
… footprints?!
![Page 41: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/41.jpg)
… footprints?!
![Page 42: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/42.jpg)
Physical Security
![Page 43: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/43.jpg)
Physical Security
![Page 44: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/44.jpg)
Physical Security
![Page 45: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/45.jpg)
Physical Security
![Page 46: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/46.jpg)
Physical Security
![Page 47: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/47.jpg)
Physical Security
![Page 48: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/48.jpg)
Physical Security
![Page 49: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/49.jpg)
Spot the phone
![Page 50: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/50.jpg)
Scada gear runs hot!
![Page 51: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/51.jpg)
Scada gear runs hot!
![Page 52: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/52.jpg)
And now for something Completely different.
![Page 53: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/53.jpg)
Entertaining and useful Not really security related
![Page 54: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/54.jpg)
Cooling silliness.
![Page 55: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/55.jpg)
Coffee!
![Page 56: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/56.jpg)
Oven top / microwave exhaust fan
![Page 57: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/57.jpg)
Sunburns!
![Page 58: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/58.jpg)
English Muffins!
![Page 59: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/59.jpg)
Face.. hugger?
![Page 60: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/60.jpg)
Quad UAV!
![Page 61: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/61.jpg)
Legs?
![Page 62: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/62.jpg)
Clothing
![Page 63: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/63.jpg)
Guess :D
![Page 64: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/64.jpg)
Original intended use
![Page 65: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/65.jpg)
Addons!
Zinc Selenide lenses
![Page 66: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/66.jpg)
Addons!
![Page 68: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/68.jpg)
Questions?
![Page 69: 44CON 2014 - Hot or not, the hacker way, Dan Tentler](https://reader038.vdocument.in/reader038/viewer/2022102922/54b39d994a795997608b45a4/html5/thumbnails/69.jpg)
Thank you very much!