This talk cover exploration of elderly android devices and the risks they can pose when you chuck them in the proverbial trash (filsy's house...).
I've found a new, (infuritating to his partner) hobby of picking up surplus IT equipment as he loves filling the house full of e-waste.
One day a pallet of surplus yealink desk phones turned up and he just had to fill the living room with a bunch of old e-waste so he did the most logical thing and sniped the auction without telling his partner...
These phones use Android build; are in common use in company's as they integrate with Microsoft Teams; so definitely are super secure and not backed by a company that are hostile to security researcher ;) ;)
Topics covered:
- Horrible, horrible security decisions by the manufacturer
- Getting admin access
- loading your own APKs onto a deskphone - company wide.
Since this is a 25min talk - i'll probably cut half the above material to the bone.