BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Tracking the Trackers: How We Took Over 36 Million G
 PS Devices\n   Protecting Children and Vehicles\n   Tags: DEF CON Official
  Talk | Demo 💻 | Exploit 🪲\n   When: Saturday\, Aug 8\, 11:00 - 11:5
 9 PDT\n   Where: LVCCW Level 1 Hall 3 1006 (Main Track 1) and DCTV-1 - [1]
 Map\n\n   Description:\n   We performed our research against three major G
 PS tracking platforms:\n   SETracker (~10M devices\, 39 brands)\, SinoTrac
 k (6M+ devices)\, and\n   TKSTAR/Thinkrace (20M+ devices). All three come 
 from the same Shenzhen\n   supply chain. All three are completely broken.\
 n\n   We achieved RCE on every platform\, including NT AUTHORITY\\SYSTEM o
 n\n   TKSTAR. From a free account with no device purchase\, we can silentl
 y\n   wiretap any child's watch\, force video surveillance\, steal vehicle
 s\n   through remote door unlock and fuel cutoff\, and take over the backe
 nd\n   servers. We filed 45 CVEs\, 19 critical\, 9 of them CVSS v3.1 10.0.
 \n\n   The worst part is the supply chain structure. 39 consumer brands in
 \n   20+ countries (Wonlex\, SaveFamily\, KidiWatch\, Garett\, etc.) all\n
    connect to the same myaqsh.com server in China. Parents think they are\
 n   choosing between brands. They are not. Brand diversity in this market\
 n   is an illusion.\n\n   We release full PoC chains\, CVE details\, and a
  brand-to-backend\n   mapping that shows how this industry actually works.
 \n\n   Speakers:Felipe Solferini\,Vangelis Stykas\n\n   SpeakerBio:  Felip
 e Solferini\n\n   Felipe is a senior penetration tester and self-proclaime
 d security\n   researcher. Most of the time\, he’s mashing the wrong but
 tons\, hoping\n   for the worst but expecting the best - or just YOLOing l
 ike there’s\n   no tomorrow. Occasionally\, he wonders if life is just a
  CTF. He has\n   presented his research at BSides London\, BSides Sofia\, 
 and Bsides\n   Vilnius.\n\n   SpeakerBio:  Vangelis Stykas\, Kumio\n\n   V
 angelis began as a developer from Greece. Ten years ago he realized\n   th
 at only his dog didn’t have an API\, so he decided to steer his\n   focu
 s towards security. That led him to pursue a PhD in Web\n   Application Se
 curity with an extra focus on machine learning. He’s\n   still actively 
 pursuing it. He currently applies his skills as a Chief\n   Technology Off
 icer at Kumio\, and during his free time\, Vangelis is\n   helping start-u
 ps secure themselves on the internet and get a leg up\n   in security term
 s. His love of a simplistic approach to hacking by\n   exploiting vulnerab
 le APIs led him to publish research regarding API\n   controlling ships\, 
 smart locks\, IP cameras\, car alarms\, EV chargers\,\n   and many other I
 oT devices. Since our lives are nowadays extremely\n   cyber-dependent\, h
 is goal is to convince all companies to never\n   neglect their API securi
 ty as rush-to-market mentality is almost\n   certain to lead to catastroph
 ic security failure. He has presented his\n   research at Black Hat USA\, 
 DEF CON\, Disobey\, BSides London\, BSides\n   Dublin\, BSides Athens\, 44
 Con and other security conferences\, and has\n   keynoted at BSides Prague
 . His most recent work on disrupting\n   ransomware operations by hacking 
 their web panels was featured at\n   Black Hat USA and DEF CON 32.\n\n   '
 \n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260808T185900Z
DTSTART:20260808T180000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 1006 (Main Track 1) and DCTV-
 1
SUMMARY:Tracking the Trackers: How We Took Over 36 Million GPS Devices Prot
 ecting Children and Vehicles
END:VEVENT
END:VCALENDAR