Careful Who You Trust: Compromising P2P Cameras At Scale by E. Barzdukas and J. Valletta & D. Franke

This talk addresses the vulnerabilities in the Kalay Platform, a peer-to-peer (P2P) protocol connecting smart camera models globally, which affects nearly 100 million IoT devices. The speakers share original research detailing their process of analyzing the P2P protocol and building a test library for decoding and manipulating network traffic. They reveal critical vulnerabilities that expose these devices to potential attacks, including remote code execution achieved by combining P2P weaknesses with device-specific flaws. The session covers a range of topics, such as hardware and physical attacks, mobile app analysis, and insights into the Kalay Platform.