Let’s Get Physical: Blind Prompt Injection and Hacking AI From Meatspace

[ Abstract ]

Prompt injection gets treated as a text problem, something that arrives over an API. But more and more of what an LLM reads into context starts in the real world: a swiped badge, a scanned barcode, an NFC tap, a Wi-Fi probe. With a Flipper Zero, a Rubber Ducky, or a $5 printed label anyone can drop an injection string into one of those channels and let it ride through the scanners, logs, and SIEMs until a downstream agent reads it and does what it says. You get nothing back when you plant it. It's blind prompt injection, and it fires later. The talk will walk the attack path, discuss some of its nuances, and finally demo and release a new open source prompt injection field kit working with Pineapple Pagers, Flipper Zeroes, and many more. Bring your devices and let's map this surface together.