Hacked - Talking Flipper Zero with The Talking Sasquatch

Episode Date: December 1, 2023

Scott bought a Flipper Zero and was too lazy to watch YouTube so we've got Youtuber The Talking Sasquatch (https://www.youtube.com/@TalkingSasquach) joining us today to talk through the hardware hacki...ng device, its past and some of the ethical boundaries of being a content creator! Learn more about your ad choices. Visit podcastchoices.com/adchoices

Transcript
Discussion (0)
Starting point is 00:00:01 And BC5 investigates viral videos showing people how to use this $200 device that can unlock cars, secured gate, even doors to private buildings. Amazon just ban these cloning devices from its website. I can do a lot for $200. Well, we talked to security experts. And so naturally, I just had to buy one. You see a news broadcast saying there is a device that is no longer legal. So naturally, you had to pick one up. Well, it's not illegal.
Starting point is 00:00:33 It's just that's a discussion going on around whether it's going to remain legal, which means that I had to get one before that discussion elevates into law. Sure. You wanted to get one while to get in is good. That makes a lot of sense. I remember when I first heard about this, it was with murmurs that the flipper zero might not be long for this world. And I too wanted to buy one. So I'm very excited you did.
Starting point is 00:00:58 And we make a podcast. So the best way you could possibly learn about it is probably interviewing someone for this show. So when I got it, I was like, what is this thing? How does it work? How do I use it? Right. So I did what everybody does. And I went to YouTube. One-stop shop. Yeah. And what did I find on YouTube? What did you find on YouTube? I found lots of content regarding the Flipper Zero, but typically one large YouTuber, the Talking Sasquatch or Talking Sasquatch, or SaaS, as I like to call him. And he makes predominantly flipper zero content. It seems to be the biggest channel.
Starting point is 00:01:34 So I did what any sane podcaster would do. Instead of watching all of his content, I invited him on the show to explain it all to me in person. It really is like the luxury of hosting a podcast, the shortest distance between not knowing something and knowing something. Would you please just come on my show and explain it to me? Exactly. So today we're joined by the Talking Sasquatch.
Starting point is 00:02:15 and we're going to go through the Flipper Zero and all the questions that I had about it, which I hope you find interesting. It's a bit more of a technical episode today, as Jordan can attest to, if that's not for you, that's fun. I hope you enjoy some of the other content, but stick around.
Starting point is 00:02:30 It was a pretty interesting chat. Yeah, it's a technical conversation, but it's also a fascinating deep dive into both what you can do with this device, where it came from, this kind of story of all these different hacker tools being brought together into like, kind of more of a gadget.
Starting point is 00:02:45 something between a gadget and a platform. And then what it means to share information on the internet about a device that has kind of a little bit of like a reputation behind it, what it means to share stuff and to have to navigate, is this okay for me to be putting out there in the world? Is this useful information or is this like hacker information? It is a fascinating conversation and talking Sasquatch was great to chat with. So thanks for coming on the show. you know, we really appreciate you making the time, making the time to come on and enlighten me notably,
Starting point is 00:03:21 but also, you know, vicariously enlighten our listeners. Thanks for having me. So the, I bought one of these flipper zeros. I read an article that said that they might potentially get banned, and then that, of course, triggered me that burning need to immediately add to cart and buy one. So I bought one. I really, like, hadn't done any research into them. I just knew that they were like these cool little hacking utilities.
Starting point is 00:03:48 I won't call it a toy because it's not a toy. And I was like, what does this thing even do? How do I use this thing? And immediately found your content and was like, you know what? I'm just going to fire this Sasquatch a message and see if he wants to come on the show and just have a chat about these things. Because you know considerably more than I probably ever will about this device. So I just thought it would be great to have you on.
Starting point is 00:04:12 Well, yeah, I definitely know. to do a few things at this point. And it's interesting, too, because it's always evolving, right? Like, every week, it seems there's a new app that comes out. It's a new, something, like, there's a paradigm shift. And, like, it's just really, really weird. And I know all sorts of tech is like that, where literally things go from, like, 50 miles an hour to 100 miles an hour, like, just because one person shows up.
Starting point is 00:04:38 Sure. But there's always some cool stuff to do. It's been really good for a flipper for me, because, there's always content there. There's always, you know, evolving situations and stuff. Totally, totally. So the, just everybody knows our guest this week talking Sasquatch has a great YouTube channel that talks considerably about this device as well as other devices I see,
Starting point is 00:05:00 as I think your most recent video is in regards to a, a Wi-Fi device that is not a flipper-based one. But the, yeah, I think a great place to start is, you know, Kind of what is it? You know, what is this thing? It's very odd looking, has a weird shape. What is it? And where did it come from?
Starting point is 00:05:22 So, like, I don't know if you know where it's from, I assume by some of the Russian lettering on the soft case that I got for it, that it might be from Russia. But, yeah, so, yeah, the flipper team is, I think, Russian and Ukrainian, something like that. The logistics of all that I'm not particularly well versed on. But obviously, it was in Kickstarter for a few years. And it's one of those things that people were starting to question, well, is this thing ever going to actually exist? But, yeah, it's kind of billed as a cybersecurity toy for a number of reasons.
Starting point is 00:05:56 One, I mean, it's fun. You know, you've got little animations and things like that on it. So it's got, like, the very most basic virtual pet, like, kind of functionality. But underneath it is a pretty okay Swiss Army knife of, cybersec tools and especially for penetration testing, it's got some pretty decent functionality.
Starting point is 00:06:22 Now, it's not the best at doing virtually anything, but the fact that one small thing, the size of, you know, a couple lighters, you can do a whole bunch of cool stuff. Because like most of my backgrounds in software
Starting point is 00:06:38 side of the hacking thing, I never really got into the hardware side. I had a little bit of phone freaking back in the day, but most software side. And the gist that I've gotten, aside from just playing an endless amount of snake on it, which I have been doing,
Starting point is 00:06:50 and I've done pretty well at, is that this is kind of a multi, you know, functional platform to build out hardware hacking things. It has a bunch of built-in functionality, like a bunch of different radio receivers and transmitters as well as infrared receivers
Starting point is 00:07:07 and transmitters, and SC receivers and transmitters. It seems like it's like an extensible platform. Would you kind of agree with that? Absolutely. And what's really interesting being from the software side is that people are still kind of unlocking different features
Starting point is 00:07:27 or different things that you can do with the flipper just through the software. Specifically the BLE spam. The people finally kind of figured out that they were able to emulate these BLE packets and now they're using them to kind of a tack cell phones and things like that. And it's really interesting because that functionality obviously was there since day one.
Starting point is 00:07:51 But the idea of doing it with a flipper and stuff like that kind of just recently came out. And that's really interesting to see things like that. Because, yeah, with GPIO, you can make almost anything for Flipper. I mean, we've seen obviously Wi-Fi boards, but now we have GPS. There are range extenders, antennas. boosters, all sorts of cool stuff. I just want to rewind a hair there and talk about some of those acronyms. BLE, so like the is Bluetooth low energy, right?
Starting point is 00:08:25 Yeah, yeah, Bluetooth low energy. So this thing can, this thing can emit Bluetooth low energy signals, which people have then figured out how to spam them at devices, essentially causing the devices to lock, correct? There's a few of them. So the first one is basically a pairing spam. So you can just throw like a bunch of headphones try to pair with your phone over and over again. And since there are so many different headphones, all of those headphones like on an iPhone, anytime you pair in like a JBL or a Jabra or anything like that, it shows up as the actual device. Yeah, yeah.
Starting point is 00:09:04 All of those devices are mapped to like an image of it. So there is a little bit of a failsafe. So you can't take the same device and try to pair it over and over and over again, but you can try to pair different devices. So what they've figured out is they, yeah, all you have to do is take a, all through the list of the devices and keep sending it to the phone over and over again, and effectively you won't be able to really use the phone. There is another attack vector that they figured out,
Starting point is 00:09:31 which effectively starts an audio device or something. I don't remember the exact logistics of it, but it effectively starts what I believe is an audio device, and it will spike the CPU to 100%. And in doing that, it makes it so that the temperature control sensor, or temperature control service won't run. And if that doesn't run, then the kernel's not getting temperature information from the CPU,
Starting point is 00:09:58 and then it does kernel panic, locks up, shuts down. Weird. Interesting. Yeah. Yeah. And it's just one of those things that I think somebody did by accident at some point in time, and they crashed their phone. trying to figure out what else they can do with it.
Starting point is 00:10:11 And they're like, wait a minute, is this work for you? Your phone, too? Yeah, wait, it works on your phone too? And then all of a sudden, I'm making a video about it. So that- Sure, crash your own device and realize there's a vulnerability out there. Yeah. The next, I just want to, the next kind of academy popped out there was GPIO,
Starting point is 00:10:30 which is the general purpose input output pins, right? So there's 18 little holes in the top of this thing that you can essentially clip circuit boards into. to the best of my knowledge, correct me if I'm wrong on this. No, that's absolutely correct. Yeah, and it delivers DC current to them so they can be powered boards. It has kind of like, I actually believe when I ordered it, I ordered prototype boards, which are just blank circuit boards that are meant for you
Starting point is 00:10:57 to build whatever you would like, clip it in and write the code to make it work. Yep. You've built a few of these things, haven't you? You've built some of these boards yourself? Yeah. So one of the things that I did when I first started off just messing with Flipper was I didn't buy the official Wi-Fi board, didn't know what it did. So I didn't waste any money or time on it. So I didn't get one of those.
Starting point is 00:11:22 And then I had seen, I can't remember who was doing it at the time, but they were just hooking up a ESP 32 because, and that's just a little, basically a Wi-Fi board. And what's cool about that is only four wires to it. So you can have a set of DePont wires, plug in four wires, and you can flash this thing into a little Wi-Fi board using the Marauder firmware by Just Call Me Coco. So, yeah, that was the first thing that I ever did. And I'm like, oh, this is really cool. And, yeah, I mean, you could just use it with the prototyping boards or anything like that. Now, I am not a hardware person per se, is in like I've always kind of liked it. Like, I know how to solder and things like that.
Starting point is 00:12:04 But I'm a bicycle mechanic by trade. I mean, I've done that for like 20-some years at this point. So, and over the years, I've done some things here and there. But, yeah, I never really did any of this stuff professionally. And that's one of the things that's cool about flippers is because it brings a lot of people that may not be in either cybersecurity or technology or any of this stuff. And it kind of gives them a reason to maybe get in there.
Starting point is 00:12:32 Once you start messing with stuff, you can get more and more complicated. Because after I made that first board with, the four wires, I decided that I wanted to make a multi-board. So I wanted to have the Wi-Fi, but I also wanted to have NRF-24 on it, which is, that was what you used for trying to take control over wireless mice and keyboards on a 2.4 gigahertz like frequency. So I wanted to add one of those to there as well. That's another seven wires. And at the same time, somebody had showed be a picture of a Helltech
Starting point is 00:13:05 ESP 32 with an OLED screen on it and I'm like, you know what? I want to try to put my logo on this thing and I didn't even have a logo. I was, I mean, my Discord name was talking Sasquatch because this is the name I've used forever, literally forever.
Starting point is 00:13:23 So, yeah, I was like, oh, cool, I'm going to put a Sasquatch on it. So I spent an awful lot of time and energy figuring that out because me and Arduino IDEE and me are not best friends the Helltech board itself is super proprietary
Starting point is 00:13:39 so all of their like commands and stuff are like their own so you can't it was it was not easy to do I ended up spending a lot of time begging people for help on the Arderino Discord but eventually we got it going but yeah so that was like another board that I made
Starting point is 00:13:55 and I just kind of kept going from there slightly more intricate every time so do have having something like the flipper was really a catalyst that allowed me to try to do some things that I never would have tried before. And starting off small and then working your way up, it's kind of a good way to, again, that's a great way to learn how to do anything. So what you're saying is this is a gateway drug? It really is, though. If you ask anybody who really got into it, like, it really is, especially, I mean, because you can go from there.
Starting point is 00:14:30 And then I started messing with firmware. And actually, one of the first things that I did, too, was I started messing with animations. How I made my initial reputation was actually for writing the tutorial on how to make flipper animations. Because before I had written it down, the only way to really find out how to do that was to go literally beg people to tell you how it's done. And a lot of cases, those people, because they learned how to do it from Val.
Starting point is 00:14:57 Val was the animator for the official flipper project, and occasionally she would show up in their discord, and everybody would gather around and start asking all these questions. But nobody had formally written down the process for it. And even once I figured it out, or once I was kind of taught how to do it from all the other people, I had some stuff wrong, too. I had made some assumptions, and some of the things that I was doing were incorrect. and I only found out until later that, like, oh, okay, cool. So, you know, the tutorial was a living project, so we kept changing it. But, yeah, it was really interesting because there's so many things you can do on it. Then I started making the animations.
Starting point is 00:15:36 And then I realized that I didn't like the way the top bar looked because it was hiding too much of the screen. Somebody had already figured out how to get rid of the, there's a little ribbon cable that sits on the top of the screen on the flipper interface. Somebody already figured out how to get rid of that. So I'm like, well, if you can get rid of that, I want to get rid of the SD card icon and stuff. So I spent a ton of time in the firmware figuring out how to delete that. Because, again, I don't know C at all. All I can do is look at code and try to understand it and modify it. So I spent hours and hours and hours doing that, and eventually I figured it out.
Starting point is 00:16:12 So it got me a little bit more comfortable working with, you know, working with the firmware. So I started making custom stuff to firmware as well. So again, it just this little silly device. It's supposed to be some sort of cyber tech or cybersec like epet. Is, yeah, a great intro into whatever you want to do with it. You know, not only a gateway drug as far as hardware goes, you've actually started writing some code and messing about in the sea at this point. So it's broken you in entirely into the cybersecurity world.
Starting point is 00:16:44 Yeah, in general, yeah. Well, so again, that's been really fun. And it just gives you a reason to kind of mess around with stuff. Yeah, totally. I want to talk about firmware in a second, but the one thing I wanted to talk about was there's some criticism about this device that I've seen from other major YouTubers and stuff, talking about how you could use a Raspberry Pi to do most of these things.
Starting point is 00:17:06 But it just seems, like, to me that seems insane because starting with a blank Raspberry Pi and having to build all of these attachments and write all these apps yourself or find them and modify them and install them versus just getting this tiny little device and already supporting so many different things, radio bands, NFC, so many things that you would have to figure out how to build a circuit board
Starting point is 00:17:29 to add onto a Raspberry Pi just seems insane to me versus just paying $300 and getting this thing. Yeah, and I mean, it's the, right now, the official pricing, because they were always inflated in the aftermarket, but official pricing in America is like $169. It was like $170. Yeah. And what's a Raspberry Pi going for now?
Starting point is 00:17:49 The last one I bought was like $75. Yeah, true. And then, yeah, you have to write your own software. You have to add all the modules and stuff. And then you have this monstrosity that's just enormous that you have to like, I guess you're going to try to use it at that point. Obviously, you're not doing anything like actually red teaming with it because, I mean, you're going to need a briefcase.
Starting point is 00:18:11 It's, this doesn't make any sense. So I do understand that. And honestly, I have been waiting for someone to do a good write-up of, a DIY flipper zero, because I will absolutely make that, for sure, because that's just fun. I would totally do that,
Starting point is 00:18:27 but especially to show what it takes to make a flipper zero. Yeah, totally. But obviously all the coding and stuff for that is just all just crazy. So trying to actually do that seems like a fool's errant, if anything, because I've heard a ton of people say
Starting point is 00:18:39 they're going to do it. I'm going to make a cheaper flipper zero. I'm like, okay, cool, where's your startup capital? Get ready. You're going to need some coders. Yeah, well, I don't know, the idea of trying to rebuild.
Starting point is 00:18:50 Like, I could see trying to make a better version of it, but I could never see the idea of trying to make a cheaper version of it. Like, I don't find it particularly... For what you get, I don't find it particularly expensive. Like, I've wasted... Like, I think we're in Canada, so I think this thing costs me like $260, which is, you know, give or take a little bit of conversion
Starting point is 00:19:07 and maybe a little bit of aftermarket pricing from distribution taxes or something, but essentially the same thing is what you pay. But, like, I couldn't imagine trying to build one of these things with this much functional. and this much extensibility for less and be able to manufacture and sell it at a profit and sustainable for cheaper than that. That seems wild to me. Yeah, one of the main reasons why trying to recreate this doesn't make sense is simply because Flipper is as much a community project as it is the actual devs. So it's got a year worth of all these really smart people putting in all this work trying to make this thing work correctly.
Starting point is 00:19:46 And I think that's literally like one of the biggest selling points for this thing at this point. Think about the last time you heard a breach story on this show. It always starts the same way. Someone somewhere saw something too late. An alert buried, a signal missed, an SOC that just couldn't keep up. Arctic Wolf set out to solve that problem by rebuilding security operations from the ground up for a world where attackers are already using AI. They created the Aurora Super Intelligence Platform with fully agentic. system powered by the swarm of experts. Instead of single-purpose bots or lucky-guess
Starting point is 00:20:24 LLMs, this swarm is full of deterministic agents that handle whole entire workflows. Humans stay in the loop and on the loop to validate the critical decisions and keep everything trustworthy, and all of this is just off running on their secure operations graph. A constantly updating intelligence engine fueled by more than nine trillion telemetry events every week and over a decade of real-world incident response. The system reasons on real signals and real context not synthetic. training data. And the result is the new Aurora agent SOC. It's the first SOC that is agent led by design. You get agents that coordinate, agents that investigate, agents that respond at machine speed,
Starting point is 00:21:00 and hundreds more that automate the repetitive work that normally buries human analysts. Arctic Wolf didn't try and bolt AI onto an old model. They rebuilt the model entirely. What makes it even more effective is how it works with Arctic Wolf's concierge experience. The team brings customer-specific context directly into the platform so every, AI-driven decision reflects your environment instead of generic assumptions. The automation frees your concierge security team to focus on higher value strategy and proactive risk reductions while the agents handle the grind. If you want to see what trustworthy, production-ready AI and security operations actually looks like, go to arcticwolf.com slash hacked. Never feel like cyber threats are evolving faster than anyone can keep up?
Starting point is 00:21:46 Last year, 2025 was nothing short of a record-breaking year for major briefs. from sophisticated ransomware operators to AI-enabled attacks that turned defenses on their head. Organizations around the world saw headlines they never expected and cybersecurity teams were tested like never before, but here's the thing. These incidents aren't just news headlines. They're learning opportunities. And that's why Arctic Wolf is hosting a live webinar on February 5th diving the most impactful breaches of 2025.
Starting point is 00:22:13 Their field CTO and security leaders are going to unpack not just what happened, but why these attacks succeeded. and most importantly, what businesses can do to fortify their defenses for it's too late. You're going to walk away with real insights into how threat actors are evolving, how defenders are responding, and what strategies can help you stay ahead of the next big breach. It's not fearmongering. It's practical, actionable, intelligence from experts in the trenches. Register now at arcticwolf.com slash hacked. You said something kind of similar in one of your videos I watched. It was like, you said something to the effect of without the community, the flipper zero is nothing.
Starting point is 00:22:52 So for I guess someone like me who doesn't own one of these things yet, but is sort of up to speed on what it can do, where's that line between what it can really do out of the box, the sort of like manufacture intended uses and what the community has empowered it to do? Like a broad overview of what it can do and what people have figured out it can do. Sure. So the basically the bear model flipper, especially in the earlier times, obviously they have frequencies and things that are locked out for different places. And honestly, most people don't really need to use those frequencies, but that's one of the things that the custom firmwares do. But beyond that, most of the good applications are written by the community. Obviously, the frequency analyzers and some of the IR functions, like those are things that were built by the original devs. But all of the additional hardware and functionality has been from the community. So you've got a lot of stuff, like, again, using,
Starting point is 00:23:52 the Wi-Fi board that comes with it, or that you can buy with it, that's set up with a firmware called Black Magic. What that's for is it's a log viewer, it's a debug viewer, so you can wirelessly read the logs from Flipper. That's what it was more or less designed to do. What the community ended up doing was installing Just Call Me Coco's Wi-Fi Marauder on it. Now you can test Wi-Fi devices, so you can de-authenticate Wi-Fi devices, you can record their handshake so you can try to decryp passwords and things like that. So a lot more functionality. You've also got people like Rabbit Lab out there and AWAC making all sorts of boards. So again, we've got the NRF board, which I mentioned before, for trying to intercept wireless keyboards and
Starting point is 00:24:39 mice. You've got a number of different CC-1101 is basically the chip set that they use to get sub-gaggaghertz frequencies. And basically the community is made. ones of those that work for 10 times further than what it currently works on without it. So they really added to the functionality, to the base functionality, through all of these community projects. And it's just really cool to see. So the sub-giggahertz frequencies, what are they typically used in? Do you know?
Starting point is 00:25:12 So, I mean, they're normally 433 and 900, I believe. Okay. And they're used in what, like ID passcards and stuff? right? Is that those? So those The ID pass cards are yeah those are going to be RFID or there's going to be NFC both of which the
Starting point is 00:25:31 flipper can definitely handle and the the wireless stuff is anything from older car keys well granted you can read a car key it's no problem you just can't use it in most current keys because they use rolling codes
Starting point is 00:25:47 which basically just means they have a sequential list of codes that it will use based on an algorithm and without knowing the algorithm, you don't know the next code, so you can't use it. But that's what the CC11 sub-gaggaghertz stuff does. Same with, I use in the control lights and stuff and little other stuff like that. And then, yeah, it does NFC, so it can read a lot of myfair keys. You can decrypt, if you have enough of the segment, sorry. And, yeah, you can emulate a lot of RFID stuff for pretty easy.
Starting point is 00:26:21 easy to copy. So anything that's relatively low security, you can pretty much copy too. And then you can get some data off of credit cards, which was a bit of a problem because that's why they got kicked off at Amazon, because Amazon saw that as being able to skim credit cards, which it definitely does not do. Yeah. So like in the old, you know, hacker movies and movies that have some cybersecurity professional and somebody steals somebody's like hotel key room card, these things like, When I first got it, I was looking through all the little sections. I updated to the newest firmware and stuff. Went through some of the apps. And it's as easy as like hitting read, tapping the card, and then hitting emulate and then tapping the hotel room door. And boom, it opens. Yeah. And that will work on some systems.
Starting point is 00:27:10 It won't on some other ones. It depends on the libraries and the dictionaries that you have. Of course. But, yeah, I mean, it's literally, in a lot of cases, that easy. Let's chat about the firmware world because that was one thing. when I got this thing, I was like, what do I do with it? I didn't even buy an SD card because I didn't realize it needed one. I did that too. I am that guy as well, so don't feel too bad. I got it. And then I was like looking around at it. And then I see some of your videos and I see
Starting point is 00:27:36 some other content about them. And I was like, man, it seems like mine's missing a bunch of stuff. And then I started looking into it. And there's a bunch of different major firmware manufacturers. You want to let maybe, as somebody that's been a part of that community, just give me a rundown or give us a rundown of like, you know. So, yeah, I can do that. Basically, I'll do a quick little story time in case we want to know. I like that.
Starting point is 00:27:56 I like story time. And I'm pretty sure this is pretty accurate. Not 100% on everything, because again, this is all like spoken word history, but hopefully my memory is good enough for this. So, yeah, basically in the beginning, it was just the normal firmware. And then there was nano and,
Starting point is 00:28:18 engineer, I want to say. There were two guys that were working on the firmware earlier on. Then it ended up just being nano for one reason or another. We won't get into. And then, yeah, basically Unleashed was born at that point in time. The fact
Starting point is 00:28:34 that they unlocked the frequency regular, the frequency blocks for certain countries was relatively frowned on upon in the official firmware land. So most of those guys got kind of exile for lack of a better term.
Starting point is 00:28:50 So that kind of branched off. So now we have Unleashed firmware. And then Roguemaster came along. And basically what Roguemaster was doing was taking the Unleashed firmware, adding things like animations, which was one of the things that got me into Roguemaster firmware anyway,
Starting point is 00:29:07 because I like animations and stuff like that. I have like a touch of the ADHD and things that are moving around kind of, you know, make me happy. But yeah, so that was one of the things that I liked. about it. And then he would also go through and scrub pretty much any application that he could find for the, for Flipper, and he would add it to the firmware, like, right away. So that app
Starting point is 00:29:28 had, or that would have basically the newest everything on it all the time. One of the downsides to that was some of these apps didn't work super well yet. Um, because again, this is, we're all doing all the bleeding edge technology or technology, but bleeding edge software. So sometimes those things wouldn't work and you'd end up with stuff that crashed. But I mean, again, if you want the latest and greatest, sometimes you run into issues with compatibility. So that's where Roguemaster kind of came from. And then Extreme popped up with Clara. She started working on a firmware, I want to say it was December of last year, as kind of an aesthetic pack on top of Roguemaster. And that was more or less the idea.
Starting point is 00:30:14 started optimizing some of the codes there. At some point, decided to reset and basically rebuild that firmware based off of the official firmware, so it's no longer a fork. And then they started working on more stuff there. Willie showed up,
Starting point is 00:30:30 and Willie is their main dev now there too, and really started doing some new stuff. Willie's very good at C and coding for a Flipper in particular. So at that point, Extreme really started doing a lot of really unique things. So most of the newest stuff out there has been really pushed and helped out by Willie and Extreme, the firmware. So they've done a lot of good stuff over there.
Starting point is 00:31:04 So right now, most of the Extreme firmware is, they've got most of the newest stuff out there because people are reaching out to the XFW devs whenever they have a new project or something, and they're actually being very active with the community in adding support for different add-on modules and stuff like that. So it's really been cool because, yeah, you can make something, like Rabbit Labs will make an antenna and reach out to XFW and be like,
Starting point is 00:31:35 hey, can you make sure this is going to work well on your firmware? And they'll add a function to it. like the ability to actually plug in external IR had to be built into the firmware because obviously it didn't exist because there was no real reason to do it. But because of that, now we have the ability to plug in IR boards that have seven or 12 or whatever LEDs on it. So it's a lot more functionality, but that had to be built into the firmware. And the fact that, you know, people could just go out and ask Willie if they could, you know, try to get it put into the firmware. it was pretty cool. So those are the main three
Starting point is 00:32:12 firmwares right now. Wait, main three custom firmwares. There were some earlier things that were kind of abandonedware, but like, yeah, that's pretty much where things
Starting point is 00:32:21 are at at the moment. So as, when I got it, obviously, as an extreme person, I put on the extreme firmware. Was that, was that the right move?
Starting point is 00:32:32 There are no wrong moves. Honestly, I tell everybody to try what, you know, try everything out. They all have their pluses and minuses, absolutely. And they all have different kind of artistic directions as far as what they're made for. Like Unleashed is a little bit less, it's a little trimmed down for a reason.
Starting point is 00:32:54 Like, they don't include as many things because they really, the idea for extreme was to include functionality, but let people decide what apps and files and stuff they wanted. where like Roguemaster was just like I want everything on it I want to just everything it's available I want to put in my firmware and Extreme decided they wanted to redo everything so they kind of just made their own stuff like they redid the entire UI they added their own settings and things like that they were the ones that finally figured out
Starting point is 00:33:25 how to change themes and stuff which is something that I had wanted to do for a while but again I'm not a coder so that was way outside of my my realm of influence, but they did a lot of really cool stuff that I always wanted to see implemented, so I was always impressed by that. As somebody who hasn't spent much time playing with it or using it or looked into building anything for it or even shoved any boards or modules in the GPIO, the one thing in the extreme firmware that I got to say I loved was the ability to turn it off easier.
Starting point is 00:33:57 Instead of having to go through the menus and find the power off switch, you could just tap on the back button until it prompted you to turn off. And that as a basic user meant a lot to me. And I was like, wow, this is great. So here's a funny thing. And this is something that catches people off guard all the time. And it did the same thing for me. That function is in the official firmware.
Starting point is 00:34:20 However, you have to hold it for a very, very, very long time. To the point we were like, is this working? So it does do that in the official firmware. They just cut the time down to like two seconds or one second. Yeah, yeah. I didn't know because when I first got it and I had the default firmware, I tried. And I was like, you've got to be able just to hold this button down.
Starting point is 00:34:41 And I held it for a long time and it never prompted me to turn off. And then I was like, oh, my God, do I actually have to go into the menu and go to the power, turn it off through there? And so that is funny that it did exist. It just was a user experience problem rather than a code issue. Yeah. And I always thought, I'm like, why do you have to hold it so long? This is weird.
Starting point is 00:35:02 Yeah, that's interesting. Like, it's good to know some of the background of this thing as, as it definitely, like, I recently flew somewhere and I didn't want to take it. You know, I'm kind of afraid of it in a small way. I'm like, is this going to emit problematic radio transmissions and I don't want to have it on an airplane? Will I get stopped at customs for having this thing? Like, what is, what is the liability that I've now taken on by owning this thing and
Starting point is 00:35:26 carrying it around with me. And for the most part, it won't be an issue. Don't go to Brazil. I think that's probably the one caveat, but yeah, for the most part, it's really not a big deal. People travel with these all a time. Granted, yeah, because we had a bunch of, everybody went to DefCon. So a bunch of flippers, so they all made it.
Starting point is 00:35:45 Cool. I think we're going to be a DefCon next year, so hopefully we'll see you there. Yeah, I'm wanting to go, and I've already kind of mentioned to my employer and stuff that I'll probably be doing that. So, Yeah, I very much hope to go next year. Let's chat about some of the modules that go on this thing because it seems like there's a lot of them.
Starting point is 00:36:04 And it seems like there's a lot that kind of do the same thing. I've looked at some of the ones from AWAC, is that right? Yep, AWAC. And some of them seem as impressive as the Flipper Zero itself, literally. Like I look at some of these modules and I'm like, oh my God, somebody like massive OLED screen, bunch of like external antenna arrays. Like they're,
Starting point is 00:36:27 they seem really comprehensive. So like what, what have you found to be some of the best modules? Actually, I'm going to reframe that question and say, what should I buy to play more with this thing? Okay. Because that's really what I'm asking.
Starting point is 00:36:41 It's pretty easy. So first things first, doesn't matter where you get it from, buy a Wi-Fi board. You can get the official one. That's fine. Or you can get one from literally almost anyone. AWalk's a good friend of mine.
Starting point is 00:36:56 And yeah, get an external Wi-Fi board. That's really, really cool. Beyond that, the external CC-11-1s are very cool because it extends the range that Flipper has, like, buy a lot. So you can, you know, you can access things that are much, much further away. And it's a lot, this makes it a lot easier to, you know, to actually do the things you want to do.
Starting point is 00:37:22 And the CC-1101 is used for what exactly? Is that sub-gigahhertz? Yeah, it's a sub-gigahhertz range extender. Okay. So what you're referring to is actually a really interesting thing. You're looking at the dual ESP32 touchscreen. That's a very cool project for a number of reasons. And it's a project that I, when he first sent me the pictures of this thing,
Starting point is 00:37:46 I was like, oh, man, this is always what I wanted this to be. the original design of this or the original one I actually made I wanted to do a because I put the touchscreen on a combo board so I had a touchscreen ESP 32 and then I had a NRF 24 on that so kind of the earlier version of the dual ESP and then my next one that I made which was my Yeti board which was actually a PCB project I worked on with a guy named I.M. O'Ryan.
Starting point is 00:38:21 And what that was actually had two ESP 32s on it, one of which was running the screen, so you could run, just call me Coco's Wi-Fi Marauder, because the software, the firmware that actually runs the Wi-Fi card,
Starting point is 00:38:39 you know, the Flipper Wi-Fi card, that's the same one that Coco uses in his ESP-32 Marauder standalone setups. So he actually has a device, which is for Wi-Fi penetration testing, and it's a standalone device, and it's got its own firmware. The ESP 32 runs the screen. So when I realized that, I was like, all right, cool, I put that onto one of my boards. But what I really wanted to do was I wanted to have two ESP 32s, one that was on its own and one that was run by the flipper. The idea was, basically,
Starting point is 00:39:14 you used the flipper to do a de-authentication attack against a Wi-Fi. device. So that's going to kick that device off of the Wi-Fi. And then use the standalone to get the PCAP files, the handshake files, for when it reconnects. So you're kind of doing two halves of the same attack where you are, you know,
Starting point is 00:39:35 both kicking something off of a network and trying to capture when they try to reconnect. So that's why this board, why I made my board. And then Awok saw that and he's like, okay, that's a cool idea. So he made the one that he has as basically what I wanted to do just done by somebody who's better at it. So yeah, that's what the dual ESP 32 that he created was, was pretty much the same idea of the one that I did just executed much better. So that just for, you know,
Starting point is 00:40:10 explanations sake, ESP 32 are Wi-Fi chips, correct? Basically, it's a Wi-Fi board and some of them have Bluetooth. Gotcha, gotcha. And then something, you mentioned a few times that I'm not fully up on and don't fully understand what it is. I doubt Jordan does. The Wi-Fi Marauder. What exactly is the Wi-Fi Marauder? The ESP-32 Marauder is an entire program set, and what that does is it can do de-authentication attacks, it can scan Wi-Fi networks, it can capture handshakes.
Starting point is 00:40:42 It basically can send and receive Wi-Fi stuff. and you can just basically figure out what you want to do with the information that you're sending or receiving. Can it sniff? Can it sniff on, like, unencrypted network traffic? So, yes and no.
Starting point is 00:41:01 I don't think you're getting as much data as you would on like WireShark or anything. Yeah. But it's, you can sniff a decent amount of stuff and you can just sniff raw and just see what you get. So yeah, you can do a decent amount of stuff with it.
Starting point is 00:41:16 So the, let's just talk about P-CAP stuff for a sec, because I know what it is, but some other people might not. So the D-Oth, let's just start with D-Ath. So when you D-Oth attack something, you're essentially punting it from a Wi-Fi network, correct? Yeah. So D-authentication attack is very politely asking a device to get off the network. Yeah.
Starting point is 00:41:36 And then P-CAPs, so when you reconnect to a Wi-Fi network, essentially your computer and the network have a little negotiation and pass a bunch of keys back and forth that agree that they should, that this device should go on the network, and that's called the authentication process, which is what the P-CAP files represent, correct? Yeah, yep. Perfect. Okay.
Starting point is 00:41:56 And you can take those P-CAP files, and through a different process, you can actually dictionary attack or brute force the Wi-Fi password, correct? Yeah, you can use, well, there's a bunch of things, but I think we use HachCat for that, usually. Yeah, perfect. Okay, I just wanted to make sure I was fully aware. of kind of what the Wi-Fi Marauder toolbox does. Because you've mentioned a number of times, and I know that there's a lot of boards that I see
Starting point is 00:42:26 and a lot of extensions, even some stand-alones from Coco that run it. And I just wanted to make sure I knew what it was before I got one of these beautiful things and plugged it into this thing and figured out what kind of devious things I can get up to. Yeah, so that's basically what Just Call Me Coco does is the Wi-Fi Marauder stuff.
Starting point is 00:42:47 Nice. their devices and as well as AWAC's devices, both seem really, really nice. The Rabbit, what was the Rabbit when you mentioned? So, yeah, Rabbit Labs. Check out Rabbit Labs. I find them, like, every search I make for these things, I always end up on some website that I'd never known to exist called Tindy. I think it's called Tindy.
Starting point is 00:43:06 Is that right? Yeah. So he's, yep, tindy.com slash story slash T-EH Rabbit with two T's and two B's. So the, because I think Rabbit makes a lot of the information. red, the IR booster boards, right? That's Rabbit. Rabbit makes the IR booster boards. He was the first one to do them.
Starting point is 00:43:25 He's got a really good IR. He's got two of them, really. He's got the Mastoblasta, which is, I believe, 12 LED. So it's really strong. There's a lot of range there. And the first one he made was the Death Star, IR Blaster. And one of the things that's really cool about Rabbit Labs. And again, all these guys have their own specific style.
Starting point is 00:43:48 And it's all very different. It's kind of interesting when you look at it. And basically Rabbit Labs does a lot of really cool screen printing and things like that. And his stuff has a different vibe to it than everybody else is. And then AWOC, again, he does like, it's hard to explain without showing the different things that people are making. Yeah, yeah. But they have a very distinctive style. Awok's a musician and a graphic artist.
Starting point is 00:44:17 and it really comes through in his electronics in a lot of ways. Totally. And then Rabbit is just a hardware dude. So he just makes really good, complicated stuff. And then puts fun screen printing and stuff on it. And everything's got like a little bit of a personality. He's got a coming out a Minion ESP 32 board,
Starting point is 00:44:40 which looks like one of the minions. And it's just those little things. Yeah, he's got a, a midian marauder. And it's just cool. It's just, he makes cool stuff. All these guys make really cool stuff. Because the,
Starting point is 00:44:54 the, the Death Star is an IR blaster, right? And it's kind of, yeah, yep. It's got like, I've seen a video of it. It's got like a glowing light,
Starting point is 00:45:02 like as the Death Star Canon when it's powered up and stuff. It's just like a cool. They are very, very cool little, little things. Oh, so, yeah, like, it's just a,
Starting point is 00:45:10 it's a great way of marketing, too, if you think about it, because, I mean, obviously it looks cool. so people are going to look at it and they're going to want it. So, yeah, it's really cool. Yeah, the AWAC stuff, I've been waiting for something to come back in stock.
Starting point is 00:45:24 It seems like he sells out pretty fast or they sell out pretty fast. I would love to order some of their products and I'd love to get one of their t-shirts. I love their kind of, they're very kind of graffiti artisty DJ inspired. Yeah, I know. His t-shirts are awesome. Yeah, and he makes those too. He sells out extremely fast. And people don't realize that these shows.
Starting point is 00:45:45 Shops are people. Like, rabbit labs, just call me Coco, AWAC, they're just people. And they have jobs and families and stuff like that. So they can't mass produce a hundred of something. Like, well, actually, Rabbit does. Rabbit's, that dude's a beast. He makes a lot of stuff.
Starting point is 00:46:06 But it's also because of the things that he does is set up to do things like that. Like he can batch surface mount stuff in an oven. Like he can do that. Most people can't. He's got a part picker. Like he's got stuff that nobody has because it's prohibitively expensive if you're doing something like this. A lot of the modules you buy are literally just raw circuit boards.
Starting point is 00:46:29 And it seems like most people then 3D print custom cases for them. And you can even download the print files from the circuit board makers often. Like here's the case if you want to print your own case. It seems like an ecosystem just ripe for. gadgety people, you know, like, hey, there's a cool gadget here. This gadget also requires you to get other gadgets that then require you to get a 3D printer to print new gadgets. It just seems like a gadget ecosystem.
Starting point is 00:46:56 And I'm not opposed to it. I like gadgets. I'm a big gadget guy, so. Well, no, you're absolutely right. And again, this is where one of the things that happened because of basically these cases, that's kind of when I started doing some of the 3D printing stuff I was doing. I picked up an Ender 3 back in, like, February. or something because A, I wanted to mess around with 3D printing, and B, it was a cool backdrop
Starting point is 00:47:20 item. I would have it printing what I was filmed. I just thought that was cool. Do it all for the content. Yeah, exactly. So, you know, I bought a printer and I spent some time modding it and messing around with that. So I kept printing more and more, learning more and more about 3D printing and, you know, putting designs on stuff. And so I'd keep posting stuff like that. Well, the interesting thing about that was that's how. I actually got asked by Deadmouse to make him a case. So, yeah, yeah, because he had posted a picture of his flipper with a Wi-Fi board plugged into it like a couple weeks ago. And I just ran him, somebody's like, oh, look, hey, Deadmost's got a, he's got a flipper.
Starting point is 00:48:03 So I'm like, oh, screw. I got to put a comment on there. So I commented it on there like, hey, man, if you ever needed like any flipper stuff. He's like, yeah, I've heard about you. I've heard good things. And I was like, holy crap. so yeah so then he DMs me and he's asking if I could make him a case for it so I'm like yeah yeah absolutely but like yeah it's the weirdest thing like one random email because I started a YouTube channel
Starting point is 00:48:27 about Flipper Zero and now I'm printing a case for Dead Mouse which I think it got delivered today so yeah it's just it's just really weird but again it just goes to show like this is another one of those situations that Flipper Zero and just the little weird things that you run into along the way, like, you'd really never know what that butterfly effect is going to have. So the, so this tiny little device that you probably kick started, I'm assuming. No, I didn't. You didn't? I didn't kickstart it.
Starting point is 00:48:57 No, I was, I was so lucky. I randomly, I don't know if I ran into an ad or what, but I know that they were really hard to get, but I didn't really know much about them. Randomly saw an ad about it, and I saw they were in stock. I'm like, screw it, I'm going to buy it, whatever. I don't buy things for myself very often anyway. So I'll go buy it, whatever. I don't care.
Starting point is 00:49:17 Yeah, so you bought this thing. Then you started designing circuits free and soldering circuit boards. Then you started writing C, and now you're like hanging out with Dead Mouse. So that is your Flipper Zero story arc. I'm not hanging out, per se, but I've talked to him a bunch of times. Actually, he's this really cool guy. It's really weird. I've met a bunch of people.
Starting point is 00:49:41 I actually just ran into Zero. day yesterday. And super cool guy too. All these people that actually know who I am because of this YouTube channel. And the YouTube channel really was, I was almost bullied into doing it anyway, which I thought was interesting.
Starting point is 00:49:59 Because originally, the only reason why I started doing this was, if you've done much digging into all the files and stuff, you may have heard of Uber Garritos. He was like the most, most well-known dude possible in Flipper World.
Starting point is 00:50:17 So, and he was around in some of the discords and stuff, but he had seen my tutorial for making animations, and he's like, hey, you do a pretty good job of writing down tutorials and stuff like that. I've got a project I'm involved in with
Starting point is 00:50:32 Lab 401, and we're making tutorial videos on how to use some of these devices. I'd be really happy to have you, you know, join that. Yeah. So that's where I got into making a video for Lab 401. And I, at that point, after that, I decided to start making my own stuff.
Starting point is 00:50:50 But, yeah, basically, Uber was like, hey, you want to do this? And he was, again, the coolest guy I knew at the time. So I'm like, oh, I sure, yeah, no problem. And, yeah, it was because of him. I even started doing any of this stuff. See, now I just feel bad for Uber because he was the coolest guy you knew at the time. But now you're hanging out with Dead Mouse. You're like, yeah, Uber's just a regular guy now.
Starting point is 00:51:10 Uber's a busy dude. I'm friends with him on, like, actual Facebook. And yeah, he's a busy dude. He's got a lot of stuff going on. So where do you think this thing's going to go next? You know, are there any projects that you're aware of any new functionality that you think people are building for it? Do you think it's just going to be kind of, is there anybody out there that's really, like, taking it to the next level? Like, is there something we should watch out for?
Starting point is 00:51:33 Or, like, you know, where does it go now? That's a really good question, honestly. So I do know that there's a new piece of hardware coming out called the flip. Nano. And that is a basically a flipper with less internal functionality and two rows of GPIO. So you have
Starting point is 00:51:51 twice the output. Oh, I guess input output. So there will definitely be a bit of a paradigm shift whenever that goes. Who knows if that will be this coming year, the year after that. Who knows? Timeframes for flipper stuff is
Starting point is 00:52:07 you don't want to mess with them. You never know. But that's a project coming out. But again, the crazy thing about, and this is every, every kind of field or every whatever genre of stuff, but someone will just show up and be a game changer. They'll just out of nowhere roll up and do something nobody thought was possible. And it just unlocks just so much potential. Like, it's just, everything all of a sudden happens. The one of the things I've been wondering about this device is, you know, is there a dark web, some private discords, places like that where you can get more, how should I put this, aggressive applications? Like the, like stealing a car keys rolling key code is very plausible. There's devices that do it already. It's actually not that hard. And the flipper probably has most of the functionality or could be extended to have the functionality to do it. Is, are there
Starting point is 00:53:08 places where people build apps that are a little bit less and build and share apps that are a little bit less publicly accepted? So absolutely. Now, I'm not aware of any like specific place. I'm also not the best person to tell about stuff like that. Not that I'm going to like make a video on it really, but being a little bit more higher profile person, I don't really. I don't really, I don't get invitations to the dark web as often as I used to. But so there are people that write scripts. Like I have scripts right now that I won't give out. Like I have a Flipper Zero ransomware scripts and I have a key logger scripts.
Starting point is 00:53:59 So there's a bunch of stuff that I am aware of and things that I have because I've used them for videos before. But are there places out there? that, you know, are writing codes for stuff, maybe. Like, because I know that Zero Day had mentioned on an interview he had done, that he was doing some things on his flipper that, at the time, weren't really being done yet. But honestly, since then, we've realized that, I mean, they do,
Starting point is 00:54:26 those scripts have been written. So whether or not he had those early or, you know, wrote him himself or whatever. But, you know, it did imply that some people had things that, other people did it. Just like I have some things that other people don't. And other people have things that I don't. Well, the, as an appeal to the community, if you were a member of a community or Discord that builds flipper scripts that maybe aren't public, fire me a DM.
Starting point is 00:54:55 Just hit me up. I'd be intrigued to know what else is going on under the covers. Because when I got this thing and when I realized what it was, like I thought it was, a tool and then I realized it was a platform. I was like, oh, there's a bunch of built-in functions already, but then you have the ability to extend it, and then you have the ability to essentially custom develop whatever you'd like for it.
Starting point is 00:55:21 What's cool about that idea, too, is seeing it as a platform, because also you have an incredibly powerful computer in your pocket already that can communicate with Flipper. So as far as, yeah, figuring out the algorithm, your phone could probably do that pretty quick. So I'm intrigued. I mean, yeah, I know I'm just intrigued to see.
Starting point is 00:55:42 I'm intrigued to know what you don't find on YouTube about this thing. You know what I'm saying? Absolutely. Yeah, I know. I 100% agree. And I do look for it. I look for that stuff too. Obviously on Reddit and all sorts of other places.
Starting point is 00:55:56 I'm constantly looking for new stuff. Again, being who I am, it's a little bit easier because people reach out to me. So someone will just hit me up in DMs be like, I made a payload encryptor or something like that. I'm like, oh, that's cool. And that's how I met. That's literally how I met Red, who was the guy who wrote the ransomware and keylogger. And yeah, he's just like, hey, I made this one thing.
Starting point is 00:56:18 And then he was like, hey, do you know anybody who has this? And I'm like, nah, I don't know anybody who has this. And he's like, well, I do. I'm like, tell me more. Well, I do. I like that. Sounds like Red's a guy that I'd like to meet. Yeah, this is a very interesting little device.
Starting point is 00:56:33 I'm intrigued to, I should say, play with it. but I would say educate myself more on its functionality and what can be done and how I can extend it or it can be extended to do different things because it's coming from the software world. I'm familiar with all kinds of software vulnerabilities and code problems and things like that, but I've never really been into the hardware side,
Starting point is 00:56:55 and this has definitely piqued my interest. You know, I've, aside from emulating circuit designs that have been given to me to make musical instruments often, I've never really built anything. And now I have this desire to build a board. And I'm not sure what I wanted to do yet. Yeah.
Starting point is 00:57:13 And I mean, you can do pretty much, you can do a lot of stuff. And if you're a code guy, definitely check out code all night. Really, really cool guy named Derek Jamison. He is a phenomenal coder. I think he used to work for Microsoft. Don't quote me on that. But a really, really ridiculously, like painfully smart dude. And yeah, he writes code and apps and stuff.
Starting point is 00:57:36 like that. So if you're interested in software side and possibly coding stuff, he's a great resource for that as well. I'm curious as like a as a content creator. You know, I watched your video on the ransomware stuff that it can do. I'll watch your stuff on hacking Wi-Fi passwords. In the ransomware episode, there's this really interesting moment where you, you blur the payload essentially. And you flat out say, I'm doing this so that like a teenager doesn't get themselves arrested. And as like a fellow content creator that makes stuff about cybersecurity, like, how do you navigate that line between not wanting to empower a person to maybe mess their life up, but wanting to put this information out there and wanting to share it with curious, interest in people and
Starting point is 00:58:22 wanting to push the community forward? How do you balance those two things? It's tricky. because obviously doing things like Diothing Wi-Fi cameras which was literally the first thing I ever published. It wasn't a picture of an animation. My very first TikTok because I tried to start TikTok as a platform
Starting point is 00:58:42 which is a silly thing you do. But my first video was literally showing me disabling my video camera, my surveillance cameras. And yeah, trying to figure out where the tipping point is. Now, hacking Wi-Fi stuff
Starting point is 00:58:58 that's really, really easy information to find. So with five seconds worth of work, you can find somewhere else to get that information. So if I'm another person doing a video on how to do it, who cares, right? Right. So where I draw the line is handing someone a weapon.
Starting point is 00:59:18 And that's kind of the way I saw that video. And especially with bad USB. Now, if anybody doesn't know what bad USB is, Flipper has the functionality. Effectively, it was like a rubber ducky. So what it will do is you plug in your flipper to a computer, and you can run a script through PowerShop or whatever. You can basically use it as a keyboard, and you can do code injection.
Starting point is 00:59:42 So what that means is if I plug my flipper into something, I can run a code that is on my flipper. The problem with that is it's very, very easy to do. And when things are too easy to do, people do them without knowing why they're doing them or what might happen. So as an example, I've seen a bunch of examples. One of which was somebody almost got auto banned in my Discord by the bot because they ran a script that typed in every single line from a B movie. Sequentially, every like half second.
Starting point is 01:00:21 So they got flood spammed and they got kicked for it. But Flipper Zero can be used to infect your computer with ransomware. And, you know, just things to be aware of. Like, yeah, these things do exist. And since I have an audience that, you know, watches things about bad USB and stuff, it's a good idea to at least spread some awareness about that. And I thought it was kind of a cool thing. But again, I'm not going to hand somebody to the tool to completely screw up somebody's computer.
Starting point is 01:00:53 Sure. That makes sense. I guess minor point of clarification. When you say that person in your Discord posted B movie quotes, are you saying they posted quotes from a low budget film or from the 2007 animated comedy B movie starring Jerry Seinfeld? It was in fact the 2000s era B movie with posted, yeah, with Jerry Seinfeld in fact, yes. Sure. Where he plays a B trying to sue humanity for how they've treated B is unfamiliar.
Starting point is 01:01:20 I just wanted to confirm that. Yes, yes. Every single line of that movie in order. Yeah, posted in Discord. And yeah, that was fun. And I think the person that did that, they were actually in voice chat at the time. And you could actively hear them freaking out, which was very funny. Sure.
Starting point is 01:01:36 Oh, that's great. I mean, that kind of tangentially connects to the one other big question I had, which is like, kind of to do with internet clout and flipper zero. I watched some of your I watched Flipper Zero TikTok so you don't have to videos, quality content, just to pass on my compliments. But so many of those are about taking this device that can do a ton of stuff. It functions as a platform to do even more stuff. And a lot of the TikTok content is about lying about what it can do, which I found interesting. It's about like, watch me tap a credit card on it and boom, I have the credit card and can use it. It's like,
Starting point is 01:02:12 well, for all the things it can do, you manage to find a couple things that didn't and are now lying about it on TikTok. Why do you think it became the like, I don't know, like center of a little bit of an internet clout trend, where in a way that hacking devices really haven't done before. It was very interesting seeing how that was. And actually, I specifically picked a lot of the videos in the TikTok one that were real. Like some of the things that I showed off were real.
Starting point is 01:02:42 I featured a couple with, again, I am Jacoby and Taco Cat, I believe. So some of those things were real. But especially in the beginning. And the beginning was bad. It was really bad, honestly.
Starting point is 01:02:53 They showed some really sketchy things. One of the videos I couldn't find that I wanted to feature in that video because I thought I really needed to talk about it. But basically, some dude with a flipper zero effectively tries to show that he's stealing a card from somebody and then following them into a building. And you can kind of do that, but the way he was doing it wasn't working at all. And he was just like pushed it past a bag. But what was going on?
Starting point is 01:03:20 is people love sensationalism. They want to think that this is a sonic screwdriver. And they literally like, so when they see something like that, they immediately believe it because it's the internet. And everything on the internet must be real. I don't know why people believe anything on the internet. But yeah, so that kind of stuff went viral. And that's what people started thinking they were getting when they bought flippers. So I actually kind of cashed in.
Starting point is 01:03:50 on that idea because if I'm doing tutorials and somebody bought one of these specifically trying to do this, then maybe they'll find my channel and watch my stuff. But the flip side of that is why I made an entire video and actually spent a good amount of time with
Starting point is 01:04:06 a guy named Betsy, who's a pretty well-known guy as far as NFC goes. He spent a lot of time explaining how NFC and stuff works, but that's why I made a video specifically said, why Flipper Zero can't steal your credit cards because that was one of the most common things that I had
Starting point is 01:04:26 seen where people showing how they could use their flipper to steal credit cards. And it's just, you can't do it. It can't be done. At least not with any like normal style credit card. But yeah, there's all, there was all an awful lot of that. And I mean, it was, it was, it was, you know, getting clicks. It was getting views. I had never, ever gotten anywhere near any, of those like, you know, million view videos, even showing like the deauthic Wi-Fi cameras. And that was real. I really did that. But it never really had the same appeal as somebody, you know, fake using a credit card
Starting point is 01:05:02 or faking using it to access something that you definitely couldn't. But yeah, those videos went crazy, especially earlier on. Cloud chasing with flipper zeros on TikTok. It's a new sentence. My last question has to do with something you said earlier. We were talking about, you know, feeling safe take. taking this thing and traveling with it. You brought up Defcom, which is basically thousands of these things converging on one city. So it's obviously okay. But you made reference to
Starting point is 01:05:28 Brazil. You said, I probably wouldn't take it to Brazil. So I'm curious what happened in Brazil. And broadly, do you think there's going to be, I don't know, more of a legal response to this thing as it becomes more famous, more popular on the internet and people construe and misconstrued what it can do? Do you think there will be more legal fallout, essentially? So I think at this point, at least for most places, we're pretty much over it. Basically, Flipper devices are not certified in Brazil. They're not allowed in Brazil. Yeah, and probably mostly from, I don't know, I'm going to speculate and say auto theft.
Starting point is 01:06:08 Because now, this is a very valid point. And somebody had pointed out before because I want to say Hakista, YouTube channel, I believe he's out of the Philippines. but he pointed out that where he was located, a lot of vehicles have aftermarket keyless entry. The aftermarket ones, a lot of them don't use rolling codes. So you actually can access cars with those. So certain places got a little bit concerned about it.
Starting point is 01:06:39 And, I mean, again, even Amazon blocked the sales of them because they thought there were credit card scammers, which is the one thing it can't do. I can't do a lot of things, but it's one of the things it can't do. So, again, super interesting. And, yeah, it's, I don't see it getting banned anywhere else at this point because, again, it's not that damage is done, but at this point, you can pretty much figure out what it does and doesn't do. I mean, hell, if you're an entire country, you have the time to watch my videos. Just find out what it does first.
Starting point is 01:07:13 Watch talking Sasquatch before you pass any legislation. Yeah, just give me a few views. You can skip the ads. It's fine. It's fine. Just drop a DM. Work for us. Yeah.
Starting point is 01:07:27 Work for us. Work for dead mouse. Work for us. Just hit them up. Thank you for us. Send down and chat with us. I think that's everything I wanted to ask about. Scott, you got anything else?
Starting point is 01:07:34 No, no. I think the first hour of intense tech chatter was mostly what I was looking for. So they kept good. And definitely thanks for having me. It's been fun. So I apologize. This is my first actual long-form podcast. Oh, no. It's been, it's, every time I've done things like this, it's been tricky. Like, I did a video with David Bumble and we actually, I recorded more videos.
Starting point is 01:08:00 But that was like three hours of doing things live. I'm not used to working live. So, and I do a decent amount of post-production. So it's, again, first time being. actually on a podcast. It's, but it's been fun. It's just that's something
Starting point is 01:08:17 I've done before. So I'm getting used to the format. No, no. Well, you crushed it. Yeah. We appreciate having you. Five stars.
Starting point is 01:08:24 Five stars for talking Saswatch. Much appreciate you guys. Hey, man. Well, thanks again for coming on. And maybe we'll talk again in the future.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.