Skip to main content
John Bundy

John Bundy

Principal Threat Researcher at Bastille Networks specializing in wireless airspace cybersecurity, and co-host of the Wireless Threat Series podcast.

Nov 10, 2026

10:20
And if you could refresh our memories on what exactly a deauth does.
10:25
Yeah.
10:25
So the deauthentication, we talked about this in the previous episode.
10:28
So if you go back and look at those, but that's a management frame from Wi-Fi.
10:32
And it's not a request, it's a statement, get off the network.
10:35
And the client can send it when it's leaving.
10:37
The access point can send it to a client to tell it to get off.
14:09
We need the very beginning of the wireless session to occur.
12:49
So did I get close? How was that?
12:51
Yeah, no, you're absolutely right.
12:52
There's four major networks now.
12:54
We kind of mentioned earlier, but let's be clear.
12:56
There's the Apple network.
12:58
Apple ops everybody into that network by default.
13:02
So that's why there's a big network.

8 MINS LATER

21:22
Mm-hmm.
10:44
And you should not do them.
10:45
Do it in the safety and comfort of your own home with your own devices.
10:48
Let's put it that way.
10:50
So let's talk a little bit about one of the first attacks.
10:53
Uh, this one doesn't require any reconnaissance, and this was popular about two or three years ago, and it's called BLE Spam.
11:01
And so we just talked about how BLE devices like to advertise, and I hinted that some vendors have added capability to make things easier.
11:10
And in particular, they wanted to make it easier to pair devices because I guess people have a few too many steps to go through when they pair.

21 MINS LATER

32:07
Yeah, it does seem fast.
30:57
Tell me about OPCW.
30:59
Yeah.
30:59
Wow.
31:00
Organization for the Prohibition of Chemical Weapons hack attempt by the GRU.
31:05
So in 2018, this group of, uh, Russian spies, there was an investigation on a poisoning in the UK, and Russia wanted to disrupt these meetings, so they sent their best and brightest over to Netherlands, I believe, to try to do some Wi-Fi attacks, and they were tracked and caught and everything.
31:22
This is one example of, of someone trying to do some Wi-Fi hacks.
31:25
Just all the stuff they had in their truck, their car, you know, they had patch antennas, they had, uh, 4G.
33:32
Some of the, we can't protect the auth- authentication piece, what else can we do to keep people away from our networks? I think that was one of the things we saw tried early on that was just so disruptive.
9:51
And you should not do them.
9:52
Do it in the safety and comfort of your own home with your own devices.
9:55
Let's put it that way.
9:56
So let's talk a little bit about one of the first attacks.
10:00
Th- this one doesn't require any reconnaissance, and this was popular about two or three years ago, and it's called BLE Spam.
10:08
And so we just talked about how BLE devices like to advertise, and I hinted that some vendors have added capability to make things easier.
10:16
And in particular, they wanted to make it easier to pair devices because I guess people have a few too many steps to go through when they pair.

21 MINS LATER

31:13
Yeah, it does seem fast.
3:11
All
3:11
functionality.
3:12
Do you meet this? Are you compatible? Are you interoperable? Do you implement these correctly so that other devices can find you and connect to you? But at the end of it, you get a certification.
3:22
You pay dearly for that, and then you're certified and you can use the logo.
3:26
But the SIG, they do deprecate older versions of the spec.
3:29
And there's a little bit of confusion about this.
3:31
The spec started back in 1999 with 1.0. We're on 6.3 now.

13 MINS LATER

16:21
uses it.

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.