How To Teach Threading To A Dolphin - Andras Tevesz
Nullcon Goa 2025 · Main Stage
Andras Tevesz, a security researcher at Kujo AI, presented a fascinating deep dive into the security of **Thread** and **Matter** networks, the foundational protocols for modern Internet of Things (IoT) home automation. The talk, titled "How To Teach Threading To A Dolphin," explored the challenges of interacting with these typically locked-down networks using a **Flipper Zero**, a popular multi-tool for hackers and security enthusiasts. Tevesz's primary motivation stemmed from a research goal to block TCP connections from IoT devices, particularly due to privacy concerns surrounding devices like spy cameras communicating with the internet.
AI review
Tevesz did real work here — built a custom Thread radio integration for Flipper Zero from scratch, fought through Zephyr RTOS hell, and ended up with a functional toolchain that actually joins Thread networks, scans ports, and establishes covert tunnels through Border Routers. This isn't a survey talk dressed up as research; he went hands-on with an understudied protocol stack and produced something reproducible. Minor deduction for the live demo fumble and the fact that the underlying attack primitives (key theft, network pivoting) aren't conceptually novel — it's the *Thread-specific*…