Comment by voidUpdate

1 day ago

I still don't think I've seen an actually useful application for a Flipper Zero. It's all just "use this to change store price tags" or "here's how to disconnect all bluetooth devices", but also "don't actually use this, because it would be illegal, this is just for educational purposes"

Beside of how the media often tries to present it, the value of Flipper Zero is not for everyone to "become a hacker with this simple app".

Its value is to provide a standardized hardware platform for (white hat) hackers for probing, prototyping, refining and sharing of security research in the fields its hardware supports (Sub-GHz RF, NFC, IR, and custom external boards via simple Input/Output pins).

Prior to that, everyone who wanted to research e.g. RF security had to either build/assemble something custom or buy much more expensive equipment. This created a barrier to collaborate on research, as everyone had to buy/build the same setup.

On top of that, Person A researching some RF topic selected an RF-transceiver from Company X, Person B used a component and a proprietary SDK of Company Y, so consolidating both work streams for a better foundation for all RF-related research required alot of time and effort from someone, breaking workflows of at least one group of researchers, etc.

In contrast, security research which utilizes Flipper Zero can be reproduced and built upon by everyone. All the work is harmonized on the same Hardware architecture, so it's easy for someone familiar with the platform to dive straight into a new idea without having to build a new breadboard, select a chipset, buy additional probing equipment etc.

  • There is much better hardware available to security researchers (chameleons, hackrf, and actually research-grade (much more expensive) equipment).

    The flipper is basically an Arduino pre built with a bunch of static antennas. It's fine and in a decent form factor, but I really haven't found it useful.

    Do you have any links to actual research (not children playing "researcher") done with flipper hardware?

  • Flipper zero themselves try to present the flipper zero as a device that "hacks things with a button press".

    And they love the free advertising they get along the same lines by youtubers desperate for clicks.

    Ultimately it just sells more devices. The flipper zero can't "hack" anything. It can only be used as a tool to perform hacking, by a skilled individual who is doing all the work/discovering an exploit.

    • > The flipper zero can't "hack" anything. It can only be used as a tool to perform hacking, by a skilled individual who is doing all the work/discovering an exploit.

      Has nobody hooked one up to an agent loop yet?

  • I'm tired of the "security research" angle when it's all just kids playing with ESP32 deauther attacks presented to them on a silver platter.

    I should not have to put up with children going "JUST SECURE YOUR NETWORKS BRO" because they spent $30 on some eBay "maurauder" dongle to be a pissant.

    • It's probably good to have kids with no big plans messing with your security now and then. Keeps you on your toes, and you can't really pass it off as an act of god if a teenager pwns you.

    • And a minority of those kids will get curious about the How and Why. Those are the security nerds of the future securing the networks against both the kids they were themselves and actual malicious actors.

      Source: Early interest in wifi security, including in other people's networks, lead me down an education and career in security

I use mine for all sorts. I volunteer at a second-hand shop so use it to set up remotes for donated media devices, I've used it to run scripts to apply the same changes to many computers that aren't on a group policy via BadUSB, I've used it for toys-to-life games, and very much more. There are plenty of genuine uses if you're cluey.

You just aren't being creative enough, I use mine daily:

1. TOTP generator

2. As an extra garage door opener to let guests in from my desk

3. To avoid typing my long WiFi password in while setting stuff up (ducky or qr code)

4. Wrote a custom app that suggests meals/ restaurants so when the wife asks what we should eat this week I can just rattle off the random suggestions

Not to mention other random things on a less often basis

Turns out it's what they said it was all along, an educational device.

This one provides the source and asks you to build it yourself so at least it has some credibility for the "education use only" claim.

I've seen similar things posted on here before that had a binary build only and zero technical documentation. It was really hard to see any kind of research or education value in those.

This right here would be useful once these price tag things start being thrown away. Times change and systems get updated and if you keep your eye out you’ll likely be able to get a handful cheap.

Yeah, I bought it and it collects a dust since then. Fun device but I have no idea how to use it in my life.

I use mine as a presentation remote, and as a USB interface for some micro controllers. Sure, I could buy a dedicated remote, or a bus pirate or other programming device, but I already have the flipper, so it suits me fine

It’s been very useful to me in so many ways, from fob management, to one IR, to rf scanner and other stuff, it’s useful if it fits your needs, just like anything else out there.