Hardware Podcasts

209. Tom Zaubermann & The Cyber Threat(s) To Your Car

The Next Byte Podcast · 4 Feb 2025 · 55m

What this episode covers

Tom Zaubermann, a cybersecurity expert and SAE International instructor who previously worked at Volkswagen, explains why legacy automotive development models like the V-model are failing in the era of connected cars. He discusses the shift towards Over-the-Air (OTA) updates, the complexities of hacking multiple Electronic Control Units (ECUs) to compromise vehicle safety, and the critical need for OEMs to adopt Secure Software Development Lifecycles (SSDLC). Zaubermann advises consumers to check for bug bounty programs as an indicator of security maturity and highlights the regulatory push via ISO 21434 in Europe.

Most relevant to

large enterprises

Topics

Mentioned

Companies
Volkswagen, Tesla, United Airlines, Subaru, Toyota, BMW
Chips
Raspberry Pi, STM32
Also
ISO 21434

Related episodes from other shows

Other shows on the same ground, closest first.

  • Embedded.fm · 58m

    415: Rolling Computers

    Benny Meisels, Lead Solution Architect at Cymotive, discusses the evolving security landscape of modern vehicles, which he describes as 'rolling computers.' He explains how the shift from isolated ECUs to connected systems with over-the-air updates creates new attack surfaces, particularly regarding keyless entry vulnerabilities like relay attacks and UWB distance reduction. Meisels emphasizes the need for end-to-end threat modeling across the complex supply chain of Tier 1, 2, and 3 suppliers, and highlights tools like ASRG, ICSim, and Car in a Box for learning automotive security.

    Security & privacyEmbedded firmware
    10 chapters

  • Embedded.fm · 55m

    33: Quitting My Finnish Lessons

    Alison Chaiken, an embedded systems expert at Mentor Graphics, discusses the transition of the automotive industry into a 'rolling data center' with up to 100 microprocessors per vehicle. She explains the shift from proprietary, hand-crafted code to open standards like AUTOSAR and Linux, highlighting the critical role of hypervisors in isolating safety-critical functions from infotainment systems. Chaiken also covers the complexities of automotive networking protocols like CAN and Ethernet AVB, the rigorous ISO 26262 safety certification landscape, and the emerging opportunities in connected cars and autonomous driving technologies.

    Embedded firmwareWireless & RF
    7 chapters

  • IoT For All Podcast · 18m

    What is Device Lifecycle Management? | Northern.tech's Eystein Stenberg | Internet of Things Podcast

    Eystein Stenberg, CTO and co-founder of Northern.tech, explains that device lifecycle management (DLM) is essential for OEMs transitioning to software-driven business models. He details the five stages of DLM—design, manufacture, commissioning, maintenance, and decommissioning—and argues that over-the-air (OTA) updates via tools like Mender are foundational for security and regulatory compliance, particularly under the EU Cyber Resilience Act. Stenberg highlights risks such as security vulnerabilities and fleet-breaking updates, while citing ZF Group as a customer leveraging Mender for autonomous vehicle management.

    Connected products & IoTSecurity & privacy
    10 chapters

  • IoT For All Podcast · 28m

    The State of IoT Development | The Eclipse Foundation's Frédéric Desbiens | Internet of Things Podcast

    Frédéric Desbiens, IoT and Edge Computing Program Manager at The Eclipse Foundation, discusses findings from the 2024 IoT & Embedded Developer Survey Report, highlighting industrial automation and automotive as leading sectors. He details the shift toward sustainability, the critical importance of security measures like post-quantum cryptography and over-the-air updates, and the growing adoption of safety-critical certifications such as ISO 26262. The conversation also covers the rise of open-source hardware, specifically RISC-V and the Open Hardware Foundation, alongside protocol trends like MQTT and SPOT Plug.

    Connected products & IoTSecurity & privacy
    7 chapters

  • Coredump Sessions · 55m

    #019: END-OF-YEAR CELEBRATION: Moments You Loved, Stories You Missed, and 2026 Predictions You Need

    François Baldassari and Chris Coleman, co-founders of Memfault, reflect on the 20th episode of Coredump Sessions, highlighting lessons from guests like Nick Sinas of Oval, Dan Mangum of Golioth, and Chad from Gabb. They discuss the critical importance of Over-the-Air (OTA) updates, the rise of AI-assisted firmware development using tools like Claude and Cursor, and the evolving security landscape for devices from Pebble to modern smart rings. The hosts predict that 2026 will see OTA become a regulatory requirement and AI offload processing to the edge, while emphasizing the need for engineers to adapt to higher-level abstractions.

    Connected products & IoTAI & machine learning
    11 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Next Byte Podcast. The episode itself belongs to its publisher.