Monday, June 9, 2014

Part 2: Exploiting the Emergency Alert System

Click HERE for Part#1

The tools…

So…while broadcasters spend millions on equipment, special antennas, and so forth to broadcast on licensed frequencies, the advent of Software Defined Radio (SDR) makes it possible to transmit/receive on any frequency you want relatively inexpensively.  Initially, SDR were used for lab/testing purposes to keep costs low researchers, manufacturers, developers, and education.

There are a variety of SDR on the market and even though power output is low it is easily boosted.  I've primarily used Ettus Research USRP series devices, though there are some cool projects out there if you Google (it all depends on your price range).   We now have the means, I've hinted at the method…

The exploit...

I hate to be cryptic and otherwise a bit of a tease, but I'm waiting to hear back on some CFP's where I might "reveal" this incredibly obvious set of vulnerabilities.  If I don't get accepted (and its highly likely that I won't) I'll update this blog post with all the pertinent details around the end of this month. So stand by my non-existent readers!

UPDATE!!