Hardware Podcasts

The CAN bus can! with Dr Ken Tindell

The Amp Hour · 30 May 2023 · 1h 08m · Episode 634

What this episode covers

Dr. Ken Tindell, CTO of Canis Automotive Labs, explains the CAN bus protocol, its history with Bosch, and its modern application in automotive security. He details how thieves use disguised JBL Bluetooth speakers containing PIC microcontrollers to inject commands and steal vehicles by bypassing safety mechanisms. The discussion covers the technical differences between CAN, LIN, and emerging standards like CAN FD and CAN XL, as well as the challenges of securing these networks against spoofing. Tindell also addresses the complexity of automotive software, gateway implementations, and the realistic timeline for autonomous driving capabilities.

Most relevant to

early-stage companies

Topics

Mentioned

Companies
Canis Automotive Labs, Bosch, Volvo, Freescale, NXP
Products
JBL
Chips
PIC-18F, S32K
Tools
Wireshark
Also
AutoSAR, CAN HD, CAN FD, CAN XL

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 05m

    149: Flamethrowers Aside

    Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

    Security & privacyEmbedded firmware
    10 chapters

  • Unnamed Reverse Engineering Podcast · 1h 03m

    065 - Multitalented Grinch

    Hosts Alvaro Brieto and Jen discuss their recent attendance at Open Sauce and the Crowd Supply teardown conference, highlighting the community aspect of hardware reverse engineering. They review several books on security and hacking history, including 'ARM Assembly and Reverse Engineering' and 'Murdoch's Pirates', while also sharing news about past guests like David from Cyber City Circuits teaching the First Lady to solder. The episode concludes with technical discussions on CAN bus vulnerabilities in Toyota vehicles, hotel IoT security, and Alvaro's new DJI Mic recording setup for upcoming coverage at CCCamp.

    Security & privacyMaker community & events
    8 chapters

  • The Next Byte Podcast · 20m

    202. How Will Your Car Get Hacked?

    Hosts Daniel and John discuss the critical intersection of hardware and cybersecurity in the automotive industry, highlighting how physical vulnerabilities can lead to remote control of vehicles. They analyze specific cases including the 2015 Jeep Cherokee hack by Charlie Miller and Chris Valasek, the 2016 Tesla Model S bug bounty discovery, and the Kia/ Hyundai theft vulnerability caused by missing engine immobilizers. The conversation emphasizes the shift towards software-defined vehicles and the role of bug bounty programs in identifying these risks before malicious actors exploit them.

    Security & privacyEmbedded firmware
    7 chapters

  • Unnamed Reverse Engineering Podcast · 1h 16m

    054 - It's A Calibration, Not An Update!

    Willem Melching, head of OpenPilot at comma.ai, details his journey from hobbyist electronics to reverse engineering automotive ECUs. He explains how he bypassed security on a VW Golf power steering module by exploiting a calibration protocol to dump firmware, then used Ghidra and binwalk to modify safety limits. Melching also describes the architecture of OpenPilot, an open-source Level 2 driver assistance system that supports over 150 cars by reverse engineering their CAN bus communications.

    Debugging & failure analysisEmbedded firmware
    8 chapters

  • Embedded.fm · 58m

    415: Rolling Computers

    Benny Meisels, Lead Solution Architect at Cymotive, discusses the evolving security landscape of modern vehicles, which he describes as 'rolling computers.' He explains how the shift from isolated ECUs to connected systems with over-the-air updates creates new attack surfaces, particularly regarding keyless entry vulnerabilities like relay attacks and UWB distance reduction. Meisels emphasizes the need for end-to-end threat modeling across the complex supply chain of Tier 1, 2, and 3 suppliers, and highlights tools like ASRG, ICSim, and Car in a Box for learning automotive security.

    Security & privacyEmbedded firmware
    10 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.