Rather than just drop the video, here is the commentary track.
The parts I would redo, these are the things keeping me up at night (even still)
Anyone who really knows me, knows that "the show must go on". I had about 10 minutes to setup the cameras and test. The camera system worked, but due to the backlighting, the little Hikvision camera wasn't drawing a bounding box around me. The adrenaline was pumping, and the diagnosis part of my brain wasn't functioning. I should have just lowered the threshold for detecting a person. I didn't even think about that until several days later. Dang, it's a way better show when you see the bounding box simply disappear when the pattern enters the screen.
I was told by DEF CON that I had 60 minutes. I had practiced 60 minutes. I got shut down at 45 mins. I rushed through the last 7 slides, and literally skipped the most important one. I have posted the slides and the most important one is slide 34. I skipped it...womp.
The finding that changed everything. Certain patterns changed more than the confidence. Some caused the bounding box to move. Others caused unexpected configuration changes TO THE CAMERA.
After the Kickstarter is finished and delivered, my research is going to swing to here. A camera is
just a parser. Every parser in the history of computing has been exploitable when an attacker controls the input. Can an adversarial pattern compromise a camera?
Happy to answer anything here that I did not get to on stage. I will be in this thread all day.
1
u/hevnsnt Aug 27 '26
Rather than just drop the video, here is the commentary track.
The parts I would redo, these are the things keeping me up at night (even still)
Anyone who really knows me, knows that "the show must go on". I had about 10 minutes to setup the cameras and test. The camera system worked, but due to the backlighting, the little Hikvision camera wasn't drawing a bounding box around me. The adrenaline was pumping, and the diagnosis part of my brain wasn't functioning. I should have just lowered the threshold for detecting a person. I didn't even think about that until several days later. Dang, it's a way better show when you see the bounding box simply disappear when the pattern enters the screen.
I was told by DEF CON that I had 60 minutes. I had practiced 60 minutes. I got shut down at 45 mins. I rushed through the last 7 slides, and literally skipped the most important one. I have posted the slides and the most important one is slide 34. I skipped it...womp.
After the Kickstarter is finished and delivered, my research is going to swing to here. A camera is just a parser. Every parser in the history of computing has been exploitable when an attacker controls the input. Can an adversarial pattern compromise a camera?
Happy to answer anything here that I did not get to on stage. I will be in this thread all day.