DEF CON 32 - Secret Life of Rogue Device: Lost IT Assets on the Public Marketplace - Matthew Bryant

Rogue hardware—such as employee devices, prototypes, and factory equipment—leaks onto secondary markets like eBay and Shu, exposing serious security risks and supply chain vulnerabilities 2:00.

Key Takeaways:
• Employee laptops and prototypes often surface on markets like eBay and Shu, with sellers rarely disclosing the true nature of devices; metadata like "property of Apple" is hidden in images 2:00.
• Image analysis using iPhone-based OCR and barcode detection enables extraction of hidden metadata, with custom tools achieving high accuracy and efficiency at low cost 10:00.
• Research faces technical hurdles on platforms like Shu, requiring reverse engineering, rooted Android devices, and IPv6 proxying to bypass rate limits and encrypted responses 5:20.
• Real-world findings include a 2011 Time Capsule with internal data (support tickets, passport scans, internal memes) and prototype iPhones with debug fuses exploitable for research 16:21.
• Factory equipment with Foxconn labels and drilled holes contains recoverable software and credentials, indicating poor secure destruction practices 24:00.

These leaks reveal systemic failures in hardware lifecycle management and supply chain security, underscoring the need for robust physical protections and secure data erasure.

Sources:

• 2:00 Overview of rogue hardware and its presence on secondary markets
• 10:00 Use of iPhone-based OCR and barcode detection for metadata extraction
• 5:20 Reverse engineering and proxyi