yeaaaaaaaaaaaaaaaaaaaalink! - dissecting an android Teams phone
This talk cover exploration of elderly android devices and the risks they can pose when you chuck them in the proverbial trash (filsy's house...).
I've found a new, (infuritating to his partner) hobby of picking up surplus IT equipment as he loves filling the house full of e-waste.
One day a pallet of surplus yealink desk phones turned up and he just had to fill the living room with a bunch of old e-waste so he did the most logical thing and sniped the auction without telling his partner...
These phones use Android build; are in common use in company's as they integrate with Microsoft Teams; so definitely are super secure and not backed by a company that are hostile to security researcher ;) ;)
Topics covered:
- Horrible, horrible security decisions by the manufacturer
- Getting admin access
- loading your own APKs onto a deskphone - company wide.
Since this is a 25min talk - i'll probably cut half the above material to the bone.
I'll update this at some point...