BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.pacifichackers.com//hackthebay-2026//QLZGWL
BEGIN:VEVENT
UID:pretalx-hackthebay-2026-XNRRSQ@cfp.pacifichackers.com
DTSTART:20260323T144500Z
DTEND:20260323T153000Z
DESCRIPTION:The most exploitable attack surface in modern businesses might 
 not be their network perimeter\, it's the Bluetooth-enabled receipt printe
 r broadcasting without authentication. This talk demonstrates how triviall
 y easy it is to hijack commercial Bluetooth devices using only a smartphon
 e\, then scales that threat to reveal city-wide surveillance implications 
 through systematic warwalking research.\n\nI'll demonstrate live exploitat
 ion of devices I've compromised in the wild: receipt printers\, Samsung TV
 s\, and commercial IoT devices\, all requiring zero technical knowledge to
  attack. Then I'll show how I scaled this from opportunistic hacking to sy
 stematic research using a $100 Raspberry Pi rig running Kismet with GPS tr
 acking\, collecting over 100\,000 device observations across San Francisco
 \, Nashville\, NYC\, and Las Vegas.\n\nThe privacy implications are severe
 : 60-65% of Bluetooth devices broadcast persistent identifiers enabling lo
 ng-term tracking as people move through cities. I'll present data-driven a
 nalysis showing how static MAC addresses combined with GPS logs create a s
 urveillance infrastructure accessible to anyone with basic Python skills. 
 Hotel door locks broadcast room numbers in plaintext. Air purifiers send 5
 0 packets per minute for no legitimate reason. The gap between "possible t
 o secure" and "secured in practice" is enormous.\n\nAttendees will see liv
 e demonstrations including a receipt printer available for audience hijack
 ing attempts\, real-time Kismet data collection from conference attendees'
  devices\, and Python analysis scripts running against live data. I'll sha
 re open-source tools for conducting this research and provide actionable d
 efensive recommendations for manufacturers\, businesses\, and individuals.
 \n\nThis presentation combines accessible exploitation demonstrations with
  rigorous data science to show that if I can build city-scale surveillance
  infrastructure without Bluetooth expertise\, anyone can.
DTSTAMP:20260422T165801Z
LOCATION:TALKS
SUMMARY:Bluetooth Warwalking: Hacking the Airwaves with Your Phone and a Pa
 ir of Sneakers - kn0ck0ut (Matt)
URL:https://cfp.pacifichackers.com/hackthebay-2026/talk/XNRRSQ/
END:VEVENT
END:VCALENDAR
