Hardware Podcasts

202. How Will Your Car Get Hacked?

The Next Byte Podcast · 26 Nov 2024 · 20m

What this episode covers

Hosts Daniel and John discuss the critical intersection of hardware and cybersecurity in the automotive industry, highlighting how physical vulnerabilities can lead to remote control of vehicles. They analyze specific cases including the 2015 Jeep Cherokee hack by Charlie Miller and Chris Valasek, the 2016 Tesla Model S bug bounty discovery, and the Kia/ Hyundai theft vulnerability caused by missing engine immobilizers. The conversation emphasizes the shift towards software-defined vehicles and the role of bug bounty programs in identifying these risks before malicious actors exploit them.

Most relevant to

large enterprises

Topics

Mentioned

Companies
IOactive, Tesla, Kia, Hyundai, Toyota, BMW, SAE International
Products
Jeep Cherokee, Tesla Model S, Apple Vision Pro
Also
Charlie Miller, Chris Valasek, Joseph Ravichandra

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 05m

    149: Flamethrowers Aside

    Craig Smith, author of the Car Hackers Handbook and founder of OpenGarages, discusses the technical and cultural aspects of automotive security and modification. He explains how CAN bus networks function, why they lack inherent security, and how attackers can exploit vulnerabilities in infotainment systems to gain code execution. Smith advocates for open access to vehicle data, the use of junkyard parts for safe testing, and the importance of organizations like I Am The Cavalry in bridging the gap between security researchers and traditional automakers.

    Security & privacyEmbedded firmware
    10 chapters

  • The Amp Hour · 1h 27m

    A Security Update with Michael Ossmann

    Michael Ossmann of Great Scott Gadgets joins Dave Jones and Chris Gammell to discuss recent hardware security trends, including the Jeep/Chrysler car hack and the vulnerabilities of smart TVs. The group details the distribution of the HackRF Radio Badge at the Chaos Communications Camp and Chris Gammell's plans for a future HackRF 2 embedded platform. They also cover the FCC's proposed rulemaking on software-controlled radios and introduce the NXP LPC4300 microcontroller.

    Security & privacyMicrocontrollers & dev platforms
    7 chapters

  • Unnamed Reverse Engineering Podcast · 1h 03m

    065 - Multitalented Grinch

    Hosts Alvaro Brieto and Jen discuss their recent attendance at Open Sauce and the Crowd Supply teardown conference, highlighting the community aspect of hardware reverse engineering. They review several books on security and hacking history, including 'ARM Assembly and Reverse Engineering' and 'Murdoch's Pirates', while also sharing news about past guests like David from Cyber City Circuits teaching the First Lady to solder. The episode concludes with technical discussions on CAN bus vulnerabilities in Toyota vehicles, hotel IoT security, and Alvaro's new DJI Mic recording setup for upcoming coverage at CCCamp.

    Security & privacyMaker community & events
    8 chapters

  • Embedded.fm · 58m

    415: Rolling Computers

    Benny Meisels, Lead Solution Architect at Cymotive, discusses the evolving security landscape of modern vehicles, which he describes as 'rolling computers.' He explains how the shift from isolated ECUs to connected systems with over-the-air updates creates new attack surfaces, particularly regarding keyless entry vulnerabilities like relay attacks and UWB distance reduction. Meisels emphasizes the need for end-to-end threat modeling across the complex supply chain of Tier 1, 2, and 3 suppliers, and highlights tools like ASRG, ICSim, and Car in a Box for learning automotive security.

    Security & privacyEmbedded firmware
    10 chapters

  • The Amp Hour · 1h 08m

    The CAN bus can! with Dr Ken Tindell

    Dr. Ken Tindell, CTO of Canis Automotive Labs, explains the CAN bus protocol, its history with Bosch, and its modern application in automotive security. He details how thieves use disguised JBL Bluetooth speakers containing PIC microcontrollers to inject commands and steal vehicles by bypassing safety mechanisms. The discussion covers the technical differences between CAN, LIN, and emerging standards like CAN FD and CAN XL, as well as the challenges of securing these networks against spoofing. Tindell also addresses the complexity of automotive software, gateway implementations, and the realistic timeline for autonomous driving capabilities.

    Wireless & RFMicrocontrollers & dev platforms
    9 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Next Byte Podcast. The episode itself belongs to its publisher.