Daniele Antonioli

Recently, I presented the ZOBS principles in a keynote at ACM WiSec'26.

Here is Tommaso Sacchetti demonstrating the BLERP peripheral impersonation attack against a vulnerable Android 13 build (2024).

Last summer, Marco Casagrande and I talked about E-Trojans: Ransomware, Tracking, DoS, and Data Leaks on Xiaomi Electric Scooters at Black Hat USA 2025.

I am excited to chair the WiSec Demo and Poster session.

The call for submission for the first edition of the DCS-CI conference is online.

The DEF CON 33 Hackers’ Almanack just dropped.

In mid 2024, Tom and I looked at BLE re-pairing, an underlooked attack surface.

Invited talk at ENS in Paris about CTRAPS.

Marco and I talked about CTRAPS with Stephen Sims from Off By One Security about CTRAPS: CTAP Impersonation and API Confusion on FIDO2.

This week we presented at IEEE Euro S&P'25 CTRAPS: CTAP Impersonation and API Confusion on FIDO2, a paper about the security and privacy of FIDO2, a widespread standard used for single-factor and multi-factor authentication.

Talk on CTRAPS attacks on FIDO2 as part of ETHZ ZISC seminars.

Mathy Vanhoef and I are co-chairing NDSS'26 Artifact Evaluation (AE).

Alfred Menezes has published a fantastic online course on real-world cryptography called Crypto 101: Real-World Deployments.

Talk on FP-tracer and browser fingerprinting at Privasky'25.

Talk on Automotive Bluetooth Security at AMUSEC'25.

The call for papers for the 4th Workshop on Automotive Cyber Security (ACSW) co-located with IEEE EuroS&P 2025 is closing today, Feb 3rd AoE.

We release the AttackDefense Framework (ADF), a threat modeling framework for IoT devices and their life cycles.

The ADF framework is described in a paper published in the ACM TECS journal in 2024 titled AttackDefense Framework (ADF): Enhancing IoT Devices and Lifecycles Threat Modeling and available on GitHub.

In this talk we will explore recent research on real world wireless security protocols.

Keynote given at ACSW'24 (EuroS&P Workshop) covering Automotive Bluetooth Security and E-Spoofer.

Modern websites use attribute-based browser fingerprinting to track us(ers) using our browser’s JavaScript API.

Keynote given at RESSI'24 covering, among others, BLUFFS, E-Spoofer, and BreakMi.

Talk covering, among others, BLUFFS, E-Spoofer, and BreakMi.

YouTube (WiSec'23)

YouTube (37c3)

Salut, Marco Casagrande will talk about E-Spoofer and I will talk about BLUFFS at the 2024 Toulouse Hacking Convention (THCON)!

This lecture overviews recent and impactful research on Bluetooth security and privacy.

YouTube Media CCC More here.

See you in Hamburg 🇩🇪 at 37c3

Breaking and fixing the Bluetooth standard.

Marco Casagrande’s presentation of our E-Spoofer paper about Xiaomi e-scooters' security and privacy recorded at ACM WiSec'23

In this lecture we cover an Introduction about Bluetooth security, its main transports (BC, BLE), procedures (discovery, connect) and logical entities (Host, Controller, HCI).