~/talk

Wearable Botnets and Happy Hacked Drivers

TalkinItalianat Codemotion Milan 2016 · 2016-11-23..11-26· [security, iot]
links:none on file
slides:none on file

A hands-on security talk demonstrating hardware and firmware attacks: the presenter removes a dishwasher PCB, identifies an NEC R8C MCU, dumps its flash with a reader and uses JTAG/serial and logic probes to reverse firmware, finding trivial buffer overflows and static C libraries that ease exploitation. The talk also shows finding an Arduino with default arduino/arduino credentials in a home PV gateway, gaining network access via DHCP, exploiting uConnect-open ports and Sprint 3G to enumerate ~2,695 reachable cars, installing modified firmware to inject CAN messages that reproduce steering and brake manipulation, and estimating a botnet potential on the order of hundreds of Gbps.

AI-written summary · about

  1. 0:00IoT vulnerabilities
  2. 5:42Dishwasher hardware analysis
  3. 10:15Embedded systems limits
  4. 14:06IoT device OS
  5. 18:20IoT security gaps
  6. 22:55IoT botnets and DDoS
  7. 29:14Modern car hacking
  8. 37:19Chrysler Uconnect attack
  9. 39:25Vehicle botnets threat
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.