I still don't think I've seen an actually useful application for a Flipper Zero. It's all just "use this to change store price tags" or "here's how to disconnect all bluetooth devices", but also "don't actually use this, because it would be illegal, this is just for educational purposes"

Beside of how the media often tries to present it, the value of Flipper Zero is not for everyone to "become a hacker with this simple app".

Its value is to provide a standardized hardware platform for (white hat) hackers for probing, prototyping, refining and sharing of security research in the fields its hardware supports (Sub-GHz RF, NFC, IR, and custom external boards via simple Input/Output pins).

Prior to that, everyone who wanted to research e.g. RF security had to either build/assemble something custom or buy much more expensive equipment. This created a barrier to collaborate on research, as everyone had to buy/build the same setup.

On top of that, Person A researching some RF topic selected an RF-transceiver from Company X, Person B used a component and a proprietary SDK of Company Y, so consolidating both work streams for a better foundation for all RF-related research required alot of time and effort from someone, breaking workflows of at least one group of researchers, etc.

In contrast, security research which utilizes Flipper Zero can be reproduced and built upon by everyone. All the work is harmonized on the same Hardware architecture, so it's easy for someone familiar with the platform to dive straight into a new idea without having to build a new breadboard, select a chipset, buy additional probing equipment etc.

There is much better hardware available to security researchers (chameleons, hackrf, and actually research-grade (much more expensive) equipment).

The flipper is basically an Arduino pre built with a bunch of static antennas. It's fine and in a decent form factor, but I really haven't found it useful.

Do you have any links to actual research (not children playing "researcher") done with flipper hardware?

I'm tired of the "security research" angle when it's all just kids playing with ESP32 deauther attacks presented to them on a silver platter.

I should not have to put up with children going "JUST SECURE YOUR NETWORKS BRO" because they spent $30 on some eBay "maurauder" dongle to be a pissant.

And a minority of those kids will get curious about the How and Why. Those are the security nerds of the future securing the networks against both the kids they were themselves and actual malicious actors.

Source: Early interest in wifi security, including in other people's networks, lead me down an education and career in security

It's probably good to have kids with no big plans messing with your security now and then. Keeps you on your toes, and you can't really pass it off as an act of god if a teenager pwns you.

Hacker News. Where you either die a pissant or become the villain with a fistful of RSUs.

I sure wish I was wealthy and had a fistful of RSUs. You wanna send me some? I make 5% over my area's 80% median income and I can't even get housing because I "make too much money" despite being $3000 too rich.

I'm pretty tired of being the network guy in the field playing remote hands having to be on the front lines of all of this bullshit having to explain to decision makers that a bunch of shitty kids are running around and there's no real solution that we can just "fix" this with.

I'm tired. If they're not deauthing our networks they're breaking into rooms with the goddamn card copying and fuzzing functionality and stealing shit.

I apologize. My response was a flippant attempt at humor and I didn't mean to personalize that at you. I have had those days where I had to clean up the mess left behind by a merry prankster. They aren't fun days.

Sometimes the deviant act will get a nod of appreciation from me, but not if an AI did all the heavy lifting. I keep a labor-of-love website up and am increasingly swatting away scrapers in an attempt not to get slammed with a bankruptcy-tier cloud bill.

the alternative is to put up with crackers abusing your insecure network for their own benefit

just secure your networks bro

I use mine for all sorts. I volunteer at a second-hand shop so use it to set up remotes for donated media devices, I've used it to run scripts to apply the same changes to many computers that aren't on a group policy via BadUSB, I've used it for toys-to-life games, and very much more. There are plenty of genuine uses if you're cluey.

This right here would be useful once these price tag things start being thrown away. Times change and systems get updated and if you keep your eye out you’ll likely be able to get a handful cheap.

Turns out it's what they said it was all along, an educational device.

Yeah, I bought it and it collects a dust since then. Fun device but I have no idea how to use it in my life.

This one provides the source and asks you to build it yourself so at least it has some credibility for the "education use only" claim.

I've seen similar things posted on here before that had a binary build only and zero technical documentation. It was really hard to see any kind of research or education value in those.

It’s been very useful to me in so many ways, from fob management, to one IR, to rf scanner and other stuff, it’s useful if it fits your needs, just like anything else out there.

It's useful for dealing with the industrial equivalent of IOT garbage

[dead]

[flagged]

As if devices created in Russia would all be "useless" or only for illegal purposes.

I smell prejudice

Cool racism bro