Hardware Podcasts

149: Flamethrowers Aside

Embedded.fm · 27 Apr 2016 · 1h 05m

What this episode covers

Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
OpenGarages, Theia Labs, I Am The Cavalry, CERT.org, No Starch, Pioneer, Google
Products
Car Hackers Handbook, Chromebook, Android
Chips
STM32
Tools
USB2CAN, CANTact, ELM 327, Metasploit

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Amp Hour · 1h 21m

    An Interview with Earl Sharpe and Collin Kidder

    Earl Sharpe and Collin Kidder of Macchina discuss automotive electronics, car hacking, and the architecture of modern vehicles. They explain how the OBD2 port provides access to CAN bus data, the challenges of reverse engineering proprietary protocols, and the security implications of drive-by-wire systems. The conversation covers the Macchina M2 development platform, the Savvy Can software tool, and the business dynamics of OEMs restricting aftermarket access to vehicle components.

    Embedded firmwareMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 08m

    The CAN bus can! with Dr Ken Tindell

    Dr. Ken Tindell, CTO of Canis Automotive Labs, explains the CAN bus protocol, its history with Bosch, and its modern application in automotive security. He details how thieves use disguised JBL Bluetooth speakers containing PIC microcontrollers to inject commands and steal vehicles by bypassing safety mechanisms. The discussion covers the technical differences between CAN, LIN, and emerging standards like CAN FD and CAN XL, as well as the challenges of securing these networks against spoofing. Tindell also addresses the complexity of automotive software, gateway implementations, and the realistic timeline for autonomous driving capabilities.

    Wireless & RFMicrocontrollers & dev platforms
    9 chapters

  • Unnamed Reverse Engineering Podcast · 1h 03m

    065 - Multitalented Grinch

    Hosts Alvaro Brieto and Jen discuss their recent attendance at Open Sauce and the Crowd Supply teardown conference, highlighting the community aspect of hardware reverse engineering. They review several books on security and hacking history, including 'ARM Assembly and Reverse Engineering' and 'Murdoch's Pirates', while also sharing news about past guests like David from Cyber City Circuits teaching the First Lady to solder. The episode concludes with technical discussions on CAN bus vulnerabilities in Toyota vehicles, hotel IoT security, and Alvaro's new DJI Mic recording setup for upcoming coverage at CCCamp.

    Security & privacyMaker community & events
    8 chapters

  • Unnamed Reverse Engineering Podcast · 1h 16m

    054 - It's A Calibration, Not An Update!

    Willem Melching, head of OpenPilot at comma.ai, details his journey from hobbyist electronics to reverse engineering automotive ECUs. He explains how he bypassed security on a VW Golf power steering module by exploiting a calibration protocol to dump firmware, then used Ghidra and binwalk to modify safety limits. Melching also describes the architecture of OpenPilot, an open-source Level 2 driver assistance system that supports over 150 cars by reverse engineering their CAN bus communications.

    Debugging & failure analysisEmbedded firmware
    8 chapters

  • The Next Byte Podcast · 20m

    202. How Will Your Car Get Hacked?

    Hosts Daniel and John discuss the critical intersection of hardware and cybersecurity in the automotive industry, highlighting how physical vulnerabilities can lead to remote control of vehicles. They analyze specific cases including the 2015 Jeep Cherokee hack by Charlie Miller and Chris Valasek, the 2016 Tesla Model S bug bounty discovery, and the Kia/ Hyundai theft vulnerability caused by missing engine immobilizers. The conversation emphasizes the shift towards software-defined vehicles and the role of bug bounty programs in identifying these risks before malicious actors exploit them.

    Security & privacyEmbedded firmware
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.