🤯 Ever wondered how those sneaky 👀 automotive security bugs 🐛 are found? 🤔 #bsidesahmedabad

You just need to uh insert the flash drive on the USB port. Yeah. And that is the infotainment. It's touchscreen. It's 2017 actually. And you wait for a few seconds before you are able to pop up the shell. Waiting. Let's wait. Yeah. Um I don't see a lot of I don't see Mazda but that's a PC and then after that it executes um my message and then also executes uh yeah and then from there uh you get a normal privilege user so you can actually try to elevate your privilege as well. So for infotainment there are some stupid attacks that works. Um there's also one experience that I have wherein I reported to hacker one back

then I can't disclose the car. Uh if I actually insert a um a keyboard to the car I can control the infotainment but then that's not a vulnerability right because that's plug and play. So the vulnerability there is that it do uh after a minute it does the infotainment. It uh so basically it's actually uh um you need to restart the car for you to be able to use the infotainment again. So that's actually um you may it may sound stupid really but it's it's so it's so simple but sometimes you get a reward for it. And I tell you, there are some um automotive companies that are rewarding