Hitting the Gym - The Anatomy of a Killer Workout
Explore the intersection of fitness technology and cybersecurity in this 54-minute conference talk. Delve into the anatomy of smart fitness equipment, examining their features, attack surfaces, and compliance considerations in both EU and US contexts. Analyze the unique challenges posed by Android-controlled devices and medical device classifications. Discover how to circumvent UI restrictions, exploit local file managers, and gain remote access to fitness equipment. Investigate privilege escalation techniques and methods for controlling hardware through Hi Kit. Learn about fingerprinting device types, identifying logged-in users, and remotely manipulating speed and incline settings. Examine known treadmill-related accidents and explore the potential for disabling safety features. Consider the implications of fitness IoT in corporate environments and potential attack scenarios. Gain insights into device vulnerabilities and their impact on gym security, equipping yourself with knowledge to address these emerging cybersecurity challenges in the fitness industry. Read more