Hardware Podcasts

415: Rolling Computers

Embedded.fm · 2 Jun 2022 · 58m · Episode 415

What this episode covers

Benny Meisels, Lead Solution Architect at Cymotive, discusses the evolving security landscape of modern vehicles, which he describes as 'rolling computers.' He explains how the shift from isolated ECUs to connected systems with over-the-air updates creates new attack surfaces, particularly regarding keyless entry vulnerabilities like relay attacks and UWB distance reduction. Meisels emphasizes the need for end-to-end threat modeling across the complex supply chain of Tier 1, 2, and 3 suppliers, and highlights tools like ASRG, ICSim, and Car in a Box for learning automotive security.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Cymotive, NXP, Tesla, Bosch, Framework, John Deere, Honda
Products
Car in a Box
Tools
ICSim
Also
ASRG, Ghost Peak

Related episodes from other shows

Other shows on the same ground, closest first.

  • The Next Byte Podcast · 55m

    209. Tom Zaubermann & The Cyber Threat(s) To Your Car

    Tom Zaubermann, a cybersecurity expert and SAE International instructor who previously worked at Volkswagen, explains why legacy automotive development models like the V-model are failing in the era of connected cars. He discusses the shift towards Over-the-Air (OTA) updates, the complexities of hacking multiple Electronic Control Units (ECUs) to compromise vehicle safety, and the critical need for OEMs to adopt Secure Software Development Lifecycles (SSDLC). Zaubermann advises consumers to check for bug bounty programs as an indicator of security maturity and highlights the regulatory push via ISO 21434 in Europe.

    Security & privacyCareers & education
    7 chapters

  • The Amp Hour · 21m

    #397.8 - An Interview with Chris Gerlinsky

    Chris Gerlinsky, an embedded reverse engineer based on Vancouver Island, explains his work decapping chips and microprobing to extract firmware and security keys from automotive ECUs and legacy cable set-top boxes. He details the physical processes of delayering ICs using chemicals and plasma etching to expose silicon bits, and discusses how aftermarket automotive companies use these techniques to integrate non-OEM parts into closed vehicle networks. Gerlinsky also contrasts the ease of reverse-engineering older pay-TV security chips with the increasing difficulty posed by modern automotive security measures like signed code and RSA signatures.

    Debugging & failure analysisSecurity & privacy
    8 chapters

  • Unnamed Reverse Engineering Podcast · 1h 16m

    054 - It's A Calibration, Not An Update!

    Willem Melching, head of OpenPilot at comma.ai, details his journey from hobbyist electronics to reverse engineering automotive ECUs. He explains how he bypassed security on a VW Golf power steering module by exploiting a calibration protocol to dump firmware, then used Ghidra and binwalk to modify safety limits. Melching also describes the architecture of OpenPilot, an open-source Level 2 driver assistance system that supports over 150 cars by reverse engineering their CAN bus communications.

    Debugging & failure analysisEmbedded firmware
    8 chapters

  • The Next Byte Podcast · 20m

    202. How Will Your Car Get Hacked?

    Hosts Daniel and John discuss the critical intersection of hardware and cybersecurity in the automotive industry, highlighting how physical vulnerabilities can lead to remote control of vehicles. They analyze specific cases including the 2015 Jeep Cherokee hack by Charlie Miller and Chris Valasek, the 2016 Tesla Model S bug bounty discovery, and the Kia/ Hyundai theft vulnerability caused by missing engine immobilizers. The conversation emphasizes the shift towards software-defined vehicles and the role of bug bounty programs in identifying these risks before malicious actors exploit them.

    Security & privacyEmbedded firmware
    7 chapters

  • IoT For All Podcast · 27m

    IoT Security Trends and What to Expect in 2021 | Trend Micro's Greg Young

    Greg Young, Vice President of Cybersecurity at Trend Micro, discusses the evolving security landscape for IoT, highlighting the shift from trusting components to trusting how they are used. He identifies wireless components, bespoke protocols, and unpatched legacy systems as primary vulnerabilities, noting that healthcare and connected cars are currently high-value targets for attackers. Young explains that the drive for low-cost components often results in a lack of internal development teams and security patches, forcing OEMs to rely on network-level shielding and bug bounty programs to mitigate risks.

    Security & privacySourcing & supply chain
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.