We will be discussing wireless security in HID devices (e.g. mouse and keyboards) as some of the devices are now claiming to be using encrypted connections. The topic stems from MouseJack back in 2016, which unveiled a series of flaws in HID devices which is susceptible to either keystroke or movement injection and sniffing attacks, and we'll be demonstrating how such devices may be built insecure in the first place and how they've become in present days.

Every hacker's wet dream has now become true: the ability to hack everywhere. I will present research that started from dumping firmware that led to me finding an attack chain being able to takeover and backdoor an entire nation’s FTTH modems by compromising the telecom’s infrastructure then to all of the modems via 6 0-days found within a week. It includes a story of a full teardown & analysis from a hardware attacker’s viewpoint, to how a nation-state actor might see the system as a whole. The presentation will interest both attackers and defenders in knowing how attackers could penetrate their systems, how to defend against such attacks even in worse scenarios, and also have an idea of the attack surface model of telecom equipment.