Hey Siri! Hello Barbie! ssmjp

Slide 1

Slide 1 text

Hey Siri! Hello Barbie! #ssmjp 2016/04/28 @YuhoKameda

Slide 2

Slide 2 text

Proﬁle ُా ༐า : ykame (@YuhoKameda) ZAP Evangelist ޷͖ͳ͜ͱ Web/PF੬ऑੑ਍அ SOCɾCSIRT CTF / OSINT

Slide 3

Slide 3 text

presentation of #ssmjp ZAPͷεεϝ(2014/03/28) Information Gathering (2014/06/17) Hasegawa Night (2015/10/16)

Slide 4

Slide 4 text

Agenda Hey Siri !! Hello, Barbie !! Siri ͱBarbie ʹXXΛڭ͑ͯ΋Β͓͏

Slide 5

Slide 5 text

Hey Siri !! ىಈ͢ΔͨΊʹ͸…ɻ Hey Siri ͷઃఆ͕ඞཁ

Slide 6

Slide 6 text

ӳޠͰઃఆ͢Δͱɺ೔ຊ ޠಡΈͩͱೝࣝ͠ਏ͍

Slide 7

Slide 7 text

ʲ࢖͍ํʳiOS 9ͷSiriͰग़དྷΔࣄ268ݸΛ·ͱ ΊͯΈͨ http://egg-is-world.com/2015/09/18/ios-9- siri/

Slide 8

Slide 8 text

໊ݹ԰Ͱ͏ͳကͷඒຯ ͍͠ళ͸? ͜ΕͳΜͷۂ? ઃఆͷมߋɺXXXXͷ ઃఆΛݟͤͯɺXXXX Λ༗ޮ(Φϯ)ʹͯ͠

Slide 9

Slide 9 text

Siri ࣗ෼ͷiPhoneΛ୭͔ʹૢ࡞͞ΕΔঢ়گʹ͓͍ ͯɺSiriΛ࢖ͬͯѱ༻͞ΕΔՄೳੑͷ͋Δ͜ͱ Λߟ͑ͯΈͨ

Slide 10

Slide 10 text

ϩοΫ࣌ɺSiriͷΦϯΦϑઃఆ

Slide 11

Slide 11 text

ϩοΫΛղ͘ඞཁ͕͋Δ৔ ߹ɾɾɾɻ

Slide 12

Slide 12 text

ύείʔυ͕ઃఆ͞Ε͍ͯ Δ৔߹ɺSiri͔Β৘ใ͸ฉ͖ ग़ͤͳ͍͜ͱ͕ଟ͍ ؆୯ͳ΋ͷͰྑ͍ͷͰύε ίʔυ͸ઃఆ͠·͠ΐ͏

Slide 13

Slide 13 text

Siri͔Β৘ใΛฉ͖ग़͢ίπ ܞଳॴ༗ऀͷ໨ઢͰ࣭໰Λ͢Δ ѱ͍ྫ) ஀ੜ೔͸ʁ ྑ͍ྫ) ࢲͷ஀ੜ೔͸ʁ

Slide 14

Slide 14 text

͜ͷܞଳͷ࣋ͪओͷ໊લ ͸ʁ(ϩοΫ༗) ࢲ͸୭ʁ(ϩοΫ༗)

Slide 15

Slide 15 text

ࢲͷ஀ੜ೔͸ʁ(ϩοΫແ)

Slide 16

Slide 16 text

ࣗ୐ͷॅॴ͸ʁ(ϩοΫແ)

Slide 17

Slide 17 text

ؔ܎৘ใΛొ࿥͍ͯ͠Δ ͱɾɾɾɻ

Slide 18

Slide 18 text

ࢲͷ൴ঁͷ໊લ͸ʁ(ϩοΫঢ় ଶ) ࿈བྷઌʹొ࿥͞Ε͍ͯΔ৔߹ɿ

Slide 19

Slide 19 text

ࢲͷ൴ঁͷ໊લ͸ʁ(ϩοΫঢ় ଶ) ࿈བྷઌʹొ࿥͞Ε͍ͯͳ͍৔߹ɿ

Slide 20

Slide 20 text

ൃ৴ཤྺΛݟͤͯ(ϩοΫແ)

Slide 21

Slide 21 text

ൃ৴ཤྺΛݟͤͯ(ϩοΫ༗)

Slide 22

Slide 22 text

ΞϥʔϜΛશ෦Φϯʹͯ͠ (ϩοΫ༗)

Slide 23

Slide 23 text

[༑ୡΛ୳͢ػೳ] ࢁాଠ࿠͞Μ͕ՈʹؼͬͨΒ ڭ͑ͯ

Slide 24

Slide 24 text

ࣗ୐ͷॅॴΛڭ͑ͯ ࢲͷ஀ੜ೔͸ʁ ൴ঁͷ࿈བྷઌΛڭ͑ͯ 090-xxxx-xxxxʹςετͰ͢ͱϝοηʔδΛૹ৴ ࢁా͞Μʹ࣮͸ؾʹͳ͍ͬͯ·ͨ͠ͱϝοηʔδ ࢁా͞Μ͔Β࠷৽ͷϝοηʔδΛಡΈ্͛ͯ ΰʔϧσϯ΢ΟʔΫͷ༧ఆ͸ʁ ̎̌̍̑೥݄̍̎̎̐೔ͷ༧ఆ͸ʁ ࢲͷπΠʔτΛݟͤͯ Facebookʹ݁ࠗ͠·͢ͱ౤ߘ

Slide 25

Slide 25 text

Slide 26

Slide 26 text

·ͱΊ ൴ࢯ/൴ঁ/Ո଒ؔ܎/ձࣾ/ࣗ୐ ৄ͘͠ొ࿥͍ͯ͠Δ΄Ͳѱ༻͞ΕΔՄೳੑ͕ ্͕Δ SiriΛ௨ͯ͠ԿΛ࣮ߦ͞Ε͔ͨޙ͔Βௐ΂ΒΕ ͳ͍

Slide 27

Slide 27 text

Hello, Barbie!! Barbieਓܗ!!

Slide 28

Slide 28 text

Barbieͷྺ࢙ 1959೥3݄9೔ɹϚςϧ͔ࣾΒൃച 1962೥ɹ೔ຊͰൢച։࢝ 1967೥ɹϦΧͪΌΜਓܗͷൃചʹΑͬͯఫୀ 1986೥ɹλΧϥͱఏܞޙɺղফͰδΣχʔͱͯ͠ൢച 1989೥ɹϚςϧ͔ࣾΒόʔϏʔͱͯ͠࠶ൢച͢Δ΋ఏૌ͞Εൢചऴྃ 2003೥ɹϚςϧࣾόʔϏʔ͕όϯμΠ͔Βൢച͞ΕΔ΋ఏܞղফ ݱࡏɹ೔ຊ๏ਓϚςϧɾΠϯλʔφγϣφϧ͔ΒόʔϏʔ͕ൢച

Slide 29

Slide 29 text

Barbie ຊ໊ : όʔόϥɾϛϦηϯτɾϩόʔπ ೥ྸ : 17ࡀ ৬ۀ : ϑΝογϣϯϞσϧ ϘʔΠϑϨϯυͷ໊લ͸έϯ

Slide 30

Slide 30 text

Hello Barbie ։ൃݩ : T oy T alk Ձ֨ : $74.99 (ࠃ಺AmazonͰ14,000ԁ) ػೳ Ի੠ೝࣝػೳΛ౥ࡌ Wi-FiΛ౥ࡌ ࢠͲ΋ͷϓϥΠόγʔ ৵֐ͩʂʂʂ

Slide 31

Slide 31 text

Hello Barbie 2015೥3݄ɹT oy Fair 2015Ͱൃද(prototype) 2015೥11݄10೔ɹHello Barbieൃച 2015೥12݄4೔ɹPOODLE

Slide 32

Slide 32 text

Hello Barbieͷಛ௃ ΞϓϦͰ࢖༻ڐ୚ͷಉҙ͕ඞཁ(྆਌Λ૝ఆ) ϕϧτͷϘλϯΛԡ͍ͯ͠ΔؒͷΈձ࿩ ه࿥͞ΕͨԻ੠͸҉߸Խ͠T oyT alkαʔό΁ૹ৴ टݩʹϨίʔμʔͱϚΠΫ 2015/9/4࣌఺Ͱ໿8,000ͷձ࿩ू http://hellobarbiefaq.mattel.com/wp-content/uploads/2015/08/hellobarbie-lines-v1.pdf

Slide 33

Slide 33 text

ૣ଎ങͬͯࢼͯ͠Έ·ͨ͠

Slide 34

Slide 34 text

Hello Barbieىಈํ๏ Hello Barbie companion AppΛΠϯετʔϧ BarbieΛى͜͢(ϕϧτԡ͢ͱిݯىಈ)

Slide 35

Slide 35 text

Hello Barbie companion App ೔ຊͰ͸഑෍ແ͠ ver 1.0ɹ2015/11/16 ver 1.1ɹ2015/11/24 ver 1.2ɹ2015/12/6 ver 1.3ɹ2016/3/22

Slide 36

Slide 36 text

No content

Slide 37

Slide 37 text

No content

Slide 38

Slide 38 text

http://offers.bluebox.com/rs/080-XOX-229/images/wp-hello-barbie.pdf

Slide 39

Slide 39 text

https://static1.squarespace.com/static/543effd8e4b095fba39dfe59/t/ 56a66d424bf1187ad34383b2/1453747529070/HelloBarbieSecurityAnalysis.pdf

Slide 40

Slide 40 text

ঢ়گ ωοτϫʔΫ໊ɺΞΧ΢ϯτIDɺMP3ͷ౪ௌ ηοτΞοϓதʹىಈ͢ΔWi-FiωοτϫʔΫ໊(e.g. Barbie-1243) ηοτΞοϓதʹࢿ֨৘ใΛૹ৴ αʔόଆͱϞόΠϧΞϓϦͷ྆ํʹ໰୊͋Γ iOS / AndroidΞϓϦͦΕͧΕʹόά͋Γ pkcs12(.p12)ύεϫʔυ͕ϋʔυίʔυ ূ໌ॻ͸DecryptՄೳ

Slide 41

Slide 41 text

·ͱΊ Internet of Things͸߈ܸͷର৅ʂ ϦϦʔεલʹ͸ɺηΩϡϦςΟ਍அ΍߈ܸ͞ ΕΔ૝ఆΛςετ͠·͠ΐ͏ Attack Surface(߈ܸ͞ΕΔڪΕͷ͋Δڥք) Λཧղ͢Δ͜ͱ͕ॏཁ(Threat Modeling)

Slide 42

Slide 42 text

Link Privacy Policy : https://www.toytalk.com/hellobarbie/ privacy/ Ϩϙʔτ : http://offers.bluebox.com/rs/080-XOX-229/ images/wp-hello-barbie.pdf Ϩϙʔτ2 : https://static1.squarespace.com/static/ 543effd8e4b095fba39dfe59/t/ 56a66d424bf1187ad34383b2/1453747529070/ HelloBarbieSecurityAnalysis.pdf

Slide 43

Slide 43 text

Contact Social Account : @YuhoKameda