Nullcon Berlin 2024 | Hi, My Name Is Keyboard By Marc Newlin

This talk delves into the security vulnerabilities found in popular peripherals, specifically focusing on Apple's Magic Keyboard and gaming keyboards. The speaker discusses the discovery of unauthenticated Bluetooth keystroke-injection vulnerabilities across multiple operating systems, including macOS, iOS, Android, Linux, and Windows, as well as link-key-extraction vulnerabilities. The session covers the research journey, the vulnerabilities identified, and the complexities involved in multi-vendor disclosure. It concludes with demonstrations and reflections on the implications for cybersecurity practices.