Link
Embed
Share
Beginning
This slide
Copy link URL
Copy link URL
Copy iframe embed code
Copy iframe embed code
Copy javascript embed code
Copy javascript embed code
Share
Tweet
Share
Tweet
Slide 1
Slide 1 text
Hey Siri! Hello Barbie! #ssmjp 2016/04/28 @YuhoKameda
Slide 2
Slide 2 text
Profile ُా ༐า : ykame (@YuhoKameda) ZAP Evangelist ͖ͳ͜ͱ Web/PF੬ऑੑஅ SOCɾCSIRT CTF / OSINT
Slide 3
Slide 3 text
presentation of #ssmjp ZAPͷεεϝ(2014/03/28) Information Gathering (2014/06/17) Hasegawa Night (2015/10/16)
Slide 4
Slide 4 text
Agenda Hey Siri !! Hello, Barbie !! Siri ͱBarbie ʹXXΛڭ͑ͯΒ͓͏
Slide 5
Slide 5 text
Hey Siri !! ىಈ͢ΔͨΊʹ…ɻ Hey Siri ͷઃఆ͕ඞཁ
Slide 6
Slide 6 text
ӳޠͰઃఆ͢Δͱɺຊ ޠಡΈͩͱೝࣝ͠ਏ͍
Slide 7
Slide 7 text
ʲ͍ํʳiOS 9ͷSiriͰग़དྷΔࣄ268ݸΛ·ͱ ΊͯΈͨ http://egg-is-world.com/2015/09/18/ios-9- siri/
Slide 8
Slide 8 text
໊ݹͰ͏ͳကͷඒຯ ͍͠ళ? ͜ΕͳΜͷۂ? ઃఆͷมߋɺXXXXͷ ઃఆΛݟͤͯɺXXXX Λ༗ޮ(Φϯ)ʹͯ͠
Slide 9
Slide 9 text
Siri ࣗͷiPhoneΛ୭͔ʹૢ࡞͞ΕΔঢ়گʹ͓͍ ͯɺSiriΛͬͯѱ༻͞ΕΔՄೳੑͷ͋Δ͜ͱ Λߟ͑ͯΈͨ
Slide 10
Slide 10 text
ϩοΫ࣌ɺSiriͷΦϯΦϑઃఆ
Slide 11
Slide 11 text
ϩοΫΛղ͘ඞཁ͕͋Δ ߹ɾɾɾɻ
Slide 12
Slide 12 text
ύείʔυ͕ઃఆ͞Ε͍ͯ Δ߹ɺSiri͔Βใฉ͖ ग़ͤͳ͍͜ͱ͕ଟ͍ ؆୯ͳͷͰྑ͍ͷͰύε ίʔυઃఆ͠·͠ΐ͏
Slide 13
Slide 13 text
Siri͔ΒใΛฉ͖ग़͢ίπ ܞଳॴ༗ऀͷઢͰ࣭Λ͢Δ ѱ͍ྫ) ੜʁ ྑ͍ྫ) ࢲͷੜʁ
Slide 14
Slide 14 text
͜ͷܞଳͷ࣋ͪओͷ໊લ ʁ(ϩοΫ༗) ࢲ୭ʁ(ϩοΫ༗)
Slide 15
Slide 15 text
ࢲͷੜʁ(ϩοΫແ)
Slide 16
Slide 16 text
ࣗͷॅॴʁ(ϩοΫແ)
Slide 17
Slide 17 text
ؔใΛొ͍ͯ͠Δ ͱɾɾɾɻ
Slide 18
Slide 18 text
ࢲͷ൴ঁͷ໊લʁ(ϩοΫঢ় ଶ) ࿈བྷઌʹొ͞Ε͍ͯΔ߹ɿ
Slide 19
Slide 19 text
ࢲͷ൴ঁͷ໊લʁ(ϩοΫঢ় ଶ) ࿈བྷઌʹొ͞Ε͍ͯͳ͍߹ɿ
Slide 20
Slide 20 text
ൃ৴ཤྺΛݟͤͯ(ϩοΫແ)
Slide 21
Slide 21 text
ൃ৴ཤྺΛݟͤͯ(ϩοΫ༗)
Slide 22
Slide 22 text
ΞϥʔϜΛશ෦Φϯʹͯ͠ (ϩοΫ༗)
Slide 23
Slide 23 text
[༑ୡΛ୳͢ػೳ] ࢁాଠ͞Μ͕ՈʹؼͬͨΒ ڭ͑ͯ
Slide 24
Slide 24 text
ࣗͷॅॴΛڭ͑ͯ ࢲͷੜʁ ൴ঁͷ࿈བྷઌΛڭ͑ͯ 090-xxxx-xxxxʹςετͰ͢ͱϝοηʔδΛૹ৴ ࢁా͞Μʹ࣮ؾʹͳ͍ͬͯ·ͨ͠ͱϝοηʔδ ࢁా͞Μ͔Β࠷৽ͷϝοηʔδΛಡΈ্͛ͯ ΰʔϧσϯΟʔΫͷ༧ఆʁ ݄̎̌̍̑̍̎̎̐ͷ༧ఆʁ ࢲͷπΠʔτΛݟͤͯ Facebookʹ݁ࠗ͠·͢ͱߘ
Slide 25
Slide 25 text
ࣗͷॅॴΛڭ͑ͯ ࢲͷੜʁ ൴ঁͷ࿈བྷઌΛڭ͑ͯ 090-xxxx-xxxxʹςετͰ͢ͱϝοηʔδΛૹ৴ ࢁా͞Μʹ࣮ؾʹͳ͍ͬͯ·ͨ͠ͱϝοηʔδ ࢁా͞Μ͔Β࠷৽ͷϝοηʔδΛಡΈ্͛ͯ ΰʔϧσϯΟʔΫͷ༧ఆʁ ݄̎̌̍̑̍̎̎̐ͷ༧ఆʁ ࢲͷπΠʔτΛݟͤͯ Facebookʹ݁ࠗ͠·͢ͱߘ
Slide 26
Slide 26 text
·ͱΊ ൴ࢯ/൴ঁ/Ոؔ/ձࣾ/ࣗ ৄ͘͠ొ͍ͯ͠Δ΄Ͳѱ༻͞ΕΔՄೳੑ͕ ্͕Δ SiriΛ௨ͯ͠ԿΛ࣮ߦ͞Ε͔ͨޙ͔ΒௐΒΕ ͳ͍
Slide 27
Slide 27 text
Hello, Barbie!! Barbieਓܗ!!
Slide 28
Slide 28 text
Barbieͷྺ࢙ 19593݄9ɹϚςϧ͔ࣾΒൃച 1962ɹຊͰൢച։࢝ 1967ɹϦΧͪΌΜਓܗͷൃചʹΑͬͯఫୀ 1986ɹλΧϥͱఏܞޙɺղফͰδΣχʔͱͯ͠ൢച 1989ɹϚςϧ͔ࣾΒόʔϏʔͱͯ͠࠶ൢച͢Δఏૌ͞Εൢചऴྃ 2003ɹϚςϧࣾόʔϏʔ͕όϯμΠ͔Βൢച͞ΕΔఏܞղফ ݱࡏɹຊ๏ਓϚςϧɾΠϯλʔφγϣφϧ͔ΒόʔϏʔ͕ൢച
Slide 29
Slide 29 text
Barbie ຊ໊ : όʔόϥɾϛϦηϯτɾϩόʔπ ྸ : 17ࡀ ৬ۀ : ϑΝογϣϯϞσϧ ϘʔΠϑϨϯυͷ໊લέϯ
Slide 30
Slide 30 text
Hello Barbie ։ൃݩ : T oy T alk Ձ֨ : $74.99 (ࠃAmazonͰ14,000ԁ) ػೳ ԻೝࣝػೳΛࡌ Wi-FiΛࡌ ࢠͲͷϓϥΠόγʔ ৵ͩʂʂʂ
Slide 31
Slide 31 text
Hello Barbie 20153݄ɹT oy Fair 2015Ͱൃද(prototype) 201511݄10ɹHello Barbieൃച 201512݄4ɹPOODLE
Slide 32
Slide 32 text
Hello Barbieͷಛ ΞϓϦͰ༻ڐͷಉҙ͕ඞཁ(྆Λఆ) ϕϧτͷϘλϯΛԡ͍ͯ͠ΔؒͷΈձ ه͞ΕͨԻ҉߸Խ͠T oyT alkαʔόૹ৴ टݩʹϨίʔμʔͱϚΠΫ 2015/9/4࣌Ͱ8,000ͷձू http://hellobarbiefaq.mattel.com/wp-content/uploads/2015/08/hellobarbie-lines-v1.pdf
Slide 33
Slide 33 text
ૣങͬͯࢼͯ͠Έ·ͨ͠
Slide 34
Slide 34 text
Hello Barbieىಈํ๏ Hello Barbie companion AppΛΠϯετʔϧ BarbieΛى͜͢(ϕϧτԡ͢ͱిݯىಈ)
Slide 35
Slide 35 text
Hello Barbie companion App ຊͰແ͠ ver 1.0ɹ2015/11/16 ver 1.1ɹ2015/11/24 ver 1.2ɹ2015/12/6 ver 1.3ɹ2016/3/22
Slide 36
Slide 36 text
No content
Slide 37
Slide 37 text
No content
Slide 38
Slide 38 text
http://offers.bluebox.com/rs/080-XOX-229/images/wp-hello-barbie.pdf
Slide 39
Slide 39 text
https://static1.squarespace.com/static/543effd8e4b095fba39dfe59/t/ 56a66d424bf1187ad34383b2/1453747529070/HelloBarbieSecurityAnalysis.pdf
Slide 40
Slide 40 text
ঢ়گ ωοτϫʔΫ໊ɺΞΧϯτIDɺMP3ͷ౪ௌ ηοτΞοϓதʹىಈ͢ΔWi-FiωοτϫʔΫ໊(e.g. Barbie-1243) ηοτΞοϓதʹࢿ֨ใΛૹ৴ αʔόଆͱϞόΠϧΞϓϦͷ྆ํʹ͋Γ iOS / AndroidΞϓϦͦΕͧΕʹόά͋Γ pkcs12(.p12)ύεϫʔυ͕ϋʔυίʔυ ূ໌ॻDecryptՄೳ
Slide 41
Slide 41 text
·ͱΊ Internet of Things߈ܸͷରʂ ϦϦʔεલʹɺηΩϡϦςΟஅ߈ܸ͞ ΕΔఆΛςετ͠·͠ΐ͏ Attack Surface(߈ܸ͞ΕΔڪΕͷ͋Δڥք) Λཧղ͢Δ͜ͱ͕ॏཁ(Threat Modeling)
Slide 42
Slide 42 text
Link Privacy Policy : https://www.toytalk.com/hellobarbie/ privacy/ Ϩϙʔτ : http://offers.bluebox.com/rs/080-XOX-229/ images/wp-hello-barbie.pdf Ϩϙʔτ2 : https://static1.squarespace.com/static/ 543effd8e4b095fba39dfe59/t/ 56a66d424bf1187ad34383b2/1453747529070/ HelloBarbieSecurityAnalysis.pdf
Slide 43
Slide 43 text
Contact Social Account : @YuhoKameda