docs: Phase 1 truth pass — wiki accuracy corrections Use-Cases.md: - BLE Cross-Location: "not a coincidence" → static-MAC intersection is strong corroborating evidence, not conclusive proof on its own - BLE Honeypot: "CYM clones it" → "CYM creates a matching advertisement" - nRF24 Sniffer: "packet log has the keystroke data" → "raw nRF24 frames; MouseJack tools decode unencrypted protocols" - WPA2 Handshake: "Cracks in four minutes" → "cracked in minutes in this case" - Deauth + PMF: "definitive per-device PMF audit" → behavioral test; note that RSN IE inspection is needed for a complete audit - Evil Twin: "usernames and passwords in plaintext" → "captive portal log records submitted credentials" WiFi-Security-Research.md: - PMF field scenario: same behavioral-test qualification - Handshake scenario: "cracks in four minutes" → conditional phrasing - Evil Twin scenario: same credential wording fix Wardriving.md: - GPS baud heading: v2.12.0 → v2.13.x - CSV example: appRelease=v2.12.0 → v2.13.23 - Time-sliced BLE section rewritten: documents hardware coexistence (CONFIG_ESP_COEX_SW_COEXIST_ENABLE + CONFIG_SOC_COEX_HW_PTI), 12.5% BLE duty cycle (320 ms / 40 ms), BLE always-on (toggle removed v2.13.x) BLE-Research.md: - Top blockquote: add 12.5% BLE duty cycle detail for wardrive coexistence; clarify all other screens use exclusive radio access - BLE Blaster CONT_WAVE table: remove "devices cannot decode any BLE PDU" absolute claim; qualify disruption depends on proximity and device resilience - BLE Honeypot scenario: "CYM clones it" → "CYM creates a matching advertisement" - GATT Clone section: renamed "GATT Profile Snapshot — Companion App Interaction Testing"; added scope note (static snapshot, not live device state) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add CYM research wiki: 9 pages + 19 images from project