LC-2 · Software Danger Reports

LrrK Def Cuts

# LrrK Def Cuts

**LRRK Watch / Conference Record** — Public DEF CON / Black Hat signals on software, firmware, and hardware that move physical systems.

| Field | Value |
| --- | --- |
| Collection cutoff | 1 August 2010 |
| Platform | Quiet Systems |
| Series | DC-Y-2010 |
| Status | short |
| Data label | Open-source intelligence // LRRK analytic product |
| Handling | Public-source material. Image rights require separate verification before publication. |

## Executive read

### BLUF

The 2010 venue record treats the UAV as the collector, not the victim: one DEF CON 18 talk puts a hobby airframe in the air as a mobile wireless-collection and C2 perch.

### Key judgments

1. **[Assessment — High confidence]** The only verified in-scope kinematic talk this year is Weigand, Haines, and Kershaw at DEF CON 18. Black Hat USA 2010 and Black Hat Europe 2010 are NIL for UAV / GCS / GNSS-vehicle / MAVLink / Parrot / DJI / ROV briefings.
2. **[Assessment — High confidence]** The failure class is the airframe used as a sensor truck. No CVE, vendor advisory, Exploit-DB ID, or talk-tied GitHub research repo attaches to the record.
3. **[Inference — Moderate confidence]** Command-link and GNSS trust of the vehicle itself are not yet the public conference topic. Watch should expect later years to flip the object from collector to victim.

## 01. Weigand / Haines / Kershaw: hobby UAV as an aerial wireless-collection perch

*Event / publication dates: presented 30 July 2010 (Friday 14:00 PT), DEF CON 18, Las Vegas.*

| Field | Value |
| --- | --- |
| Venue | DEF CON |
| Component | hardware |
| Product | Hobby UAV used as a mobile aerial wireless-collection / C2 platform (no commercial SKU named) |
| CVE / advisory | none found |
| Patch | none |
| Exploit status | none public |

**Verified record — [Fact — A1]** Michael Weigand, Brad “Renderman” Haines, and Mike Kershaw presented “Build your own UAV 2.0 - Wireless Mayhem from the Heavens!” at DEF CON 18. The DEF CON 18 archive and speaker page list the talk. media.defcon.org holds the video. InfoconDB cross-checks the title. The airframe is the sensor, not a disclosed victim of a command-link or GNSS failure.

**Exposure.** Sense and Act via an airborne collection / C2 perch. Move of the hobby airframe is the delivery method, not the disclosed failure.

**Intelligence assessment.** [Assessment — High confidence] This is a platform-as-payload talk, not a vendor vulnerability disclosure. [Uncertainty] No named flight-controller, datalink, or GNSS product is pinned in the inventory record. [Inference — Moderate confidence] The physical consequence is elevated RF collection and airborne C2 reach, not unauthorized maneuver of a third-party UAV.

**Opportunity.** Passport later airframes that reuse hobby autopilots or commodity radios. Lab whether a given stack treats the airframe as trusted sensor truck. Watch for the first venue talk that names the vehicle as the victim.

**LRRK relevance.** Watch and Lab. Sense-Move-Act on a hobby airframe used as a collector. Campaign the “UAV-as-sensor-truck” class separately from command-link failures.

**Confidence.** High on the talk, archive, and failure class. Low on a named product or patch state — none is published.

## Forward indicators

1. A Black Hat or DEF CON talk that names the UAV, GCS, or datalink as the victim rather than the collector.
2. A CVE, vendor advisory, or Exploit-DB record tied to a hobby autopilot or aerial wireless payload shown on these stages.
3. Any in-scope Black Hat Europe kinematic briefing (2010 is NIL).
4. A named research repo or slides that pin a flight-controller or radio SKU to this collector class.

> **Collection integrity.** Searched media.defcon.org DEF CON 18 presentations and video-and-slides; defcon.org DC18 archive and speaker pages; Black Hat USA 2010 archives; Black Hat Europe 2010 archives (Barcelona, 12–15 April 2010); InfoconDB cross-check; contemporaneous BH/DC press wrap-ups. Black Hat USA 2010 and Black Hat Europe 2010 are NIL for kinematic-system briefings. Out-of-venue items (Samy Kamkar SkyJack, Todd Humphreys / UT Austin civil-GPS UAV capture, HOPE 2012 “Pwn the Drones,” ADS-B / ATC / airliner avionics, car CAN talks) stayed out. No invented talks. No exploit steps. CVE / Exploit-DB / GitHub research repo: none found for the counted talk.

*LRRK — security assurance for systems that sense, move, and act.*

<p align="right"><span style="opacity:0.35;letter-spacing:0.18em;font-size:0.8em">L-C2</span></p>