076 - Living In A Vast World of Craziness
Summary
Jane Costillo and Alvaro interview Dan Walters about his ISP hacking village at CypherCon. Walters explains how he built a lab to ethically probe cable modem infrastructure, revealing vulnerabilities in DOCSIS protocols and unauthenticated management interfaces. The discussion covers risks like remote device control, weak encryption, and the lack of security in consumer networking gear.
Topics discussed
Introduction and guest Dan Walters background
Overview of ISP hacking and CPE devices
DOCSIS protocol evolution and management
Vulnerabilities in WAN and fiber infrastructure
ISP equipment ownership and setup flaws
Remote modem manipulation and MITM attacks
CypherCon ISP hacking village setup
Tools for analyzing modem traffic and firmware
Open source firmware and government data collection
Firmware updates and SSID password exposure
DNS manipulation and internet fragmentation
Hardware hacking curiosity and JTAG debugging
Building a DIY ISP lab on a budget
RF bonding and Binwalk for firmware analysis
Conclusion and resources for listeners
Listen ad-free on Castria