Bestand wählen
Merken

How to drift with any car

Zitierlink des Filmsegments
Embed Code

Automatisierte Medienanalyse

Beta
Erkannte Entitäten
Sprachtranskript
that was the
end of this and
the 1st thing is that the you please not then the young men began to once dates now have have up but it's so I hope everybody had been so in a way of going to prison what would have been doing lately we we've cost actually so hallway of my name is studies that vision of the captured by manatee student union it does could inference and I'm part of it test system and security laboratory the other thing I'm currently in Internet quarks not of I like a lot of stuff like reverse engineering everything that is related to Cosso all mechanics and a very something be to do I showed already the using it and we've made will be Dumais personal uh my name is due on my work but just quote that quarks lab as security engineer uh I'm quite quite new to the security issue but they work uh in the industry before and I switched to the show because it's very fun and I like to reverse that almost everything in the world you have small talk about reversing a piece of hardware that you can find enough in an automobile so what is this talk about this we had this talk will be 2 different fault the first one is how to do it with any kind of for an introduction to automotive systems so what you can do with them and watch what we actually did with them and the 2nd part which nineties out to properly right in and you you'll see why is that there is another go so and the reverse engineering stuff like this so 1st lots of this thing with any girl so the idea is that I I'm a student so I work at my school not so I had to find a way to explain why I was thinking different calls every day of my schools garage so the official goal was to look at a local works and what arise from the is what can I do what can 1 do with a modern counts call system the uh the restriction had was that the summer student I'm pole so I don't have a lot of money and I don't have a lot of calls so I was actually taking my family's the phone calls and trying to analyze them so I don't I wasn't able to break indices of remove any parts from the call so the test subjects of what which cars with a plain weaves
I had of 5 or 6 of them the first one for posterity is mine actually is a 2006 about 2nd portal from what is nice is that you can spend the whole day trying to find some is on the bias of each of your colleagues to all the on ages so you can take the oscilloscope and try to find and you won't find them anyway just before the meeting tried to sink is the something I'm looking for already in there this 2nd guys my grandmother's copied syllables 2nd post 2013 and and the last guy
I will talk about is my mom step 5 and that's a convertible it's from 2010 as the dates are important because of the canvas and we'll talk about just after is quite recently in a way that security on the canvas of on the moon changes greatly from 1 year to another so the campus I was playing with on this the cop was quite different from the 2013 those eigen full bottle for example it OK so talking with the cult so this is the of introduction by
authorities people already know about what I'm going to go
out but I want everybody to be on the same
1st steps so 1st of all and ECU it stands for actually control unit and a it's a small computer that you get all around a cop so there are many of them you can have at most 70 of them in very modern cost and the control different parts of it so you have the energy in the portraying the transmission ABS stuff like this and as they talk to each other on what we call the canvas the the can thus easily message-based so broadcast protocol of me sage is almost a composed of 2 important things which are the of arbitration ID which I would refer to ID from now on so that they can be given of 29 bits long and you have data of data is 8 bytes longer on the standoff conversation but they on top protocol that Don group messages together to get the beginnings of that what is interesting is that it's a broadcast protocol so the of and collision detection system is they don't see the idea is you know where your ideas idea priority so very important can be said really have a very low ideas they would be sent from and is the user of a very low vital ID and of this important 1 we'll are the bigger arbitrage it the how do you talk to your can best without getting and the call for the theory the there is the OBD to ball all these things fall on but diagnostic and easy vehicle so that mistake and reporting capabilities when you are driving you of of that let's let's start to bleed under does not seem OK something's wrong you bring your call to your car repair shop as a character a day we just we just like it says to the sport with cheese located around the steering wheel of fun and query information using PAGE is so PAGE is of paramount ID it's means all day I want to have information about for example the all all the speed all the field of of something like this and you can set or reset diagnostic trouble codes administered diagnostic trouble codes means OK something is wrong with this part of the GOP for example here is my set up so always just a raspberry pi of pike tend to shield the angle the 9 2 a cable I was able to have a full Linux that can that can understand 10 messages and talk with the canvas so we that I could just communicate with my without breaking anything which is quite nice how'd what does it look like saying Python just import camps or it's a stand that by gage Python down you create an interface so it's circuit can so it's like any kind of interface you just created can their interface and you can communicate with a can of S you create your message so that I hear what the important that differs by tells all many bytes are important to the message you can have a bytes of that out of the number of bytes process will be this number so like there it's say OK there are only 2 bytes of that does that that interesting just discard the 5 of the ones here it's asked for the 1st mode so all the of different model of the 1st mode the phase OK I wanted to run value of what I'm looking for and Zurich C is all PM so I want a current value of the RPM if I put to you that it's the 2nd mode and it's asks for the when the last 2 that the trouble codes that was actually set you have different like that but what interested me was OK what is a current in you create from a set of 7 DAC is the classic ID for diagnostic tools so the most you use with answers to all be the queries if you go you still deciding on pre 29 bits depend of the Gulf of the fat 500 for example it was this 1 you send said you get your answer and that's it OK so was this was this URI how do you talk but how did I actually talk with my costs so the 1st obedience I was able to get was on my grandmother's portal is quite a recent goddesses and searching so there was a gateway sort a firewall between the OBD to bought and the actual can bus so when I plug myself to the CAN bus I wouldn't receive anything unless I send an OBD query i would receive my answer but that's all as as the bus would be completely silent so you are here are some examples so this is a once form just before well connected the RBM so this is the value of the opium here I can get the engine coolant temperature very important so the idea is that I need to answers 83 and 83 it's 131 degrees as eighties that you call you are working with unsigned bytes so if you want to get and they get its temperature z strong doubts tells you to remove those of strikes 40 from your temperature if you will uh outside of minus 40 all descendants 15 degrees you of all the problem than your couldn't temperature so it seems to work ok and nice so this thing everything the source to explain to my grandmother why I was telling a call for 2 weeks from now so we this I'm able to get the all PM the speed and you grant approaches
always very important serotonin accelerated but be that the the position then the elapsed time since engine starting so anyway kind of graphical my
grandmother understands everybody's up right the so right now I can query standout OBD these I can have the rpm speech so the vote in the city would want to have on the all does but if you want to get some probably more interesting stuff you have to go through with the constant so specifically ideas of examples steering wheel position and break and pledge that your book that like gobbling carries out construct specific so you have to break stuff to be able to find them all of very good friends with manufacturer which I haven't yeah I mean nice we can carry stuff mostly Then we modified the same interest in this in this interesting from OBD because feel I don't want to mess with the call of by cutting anyway so 1st issue what political and I actually talking to graph on top protocols like JWP reviews Keyword protocol 2000 unified domestic system is Volkswagen version of either to be like really as of like these which vertical and I am I talking to OK let's just put forth by sending the classic of introduction Panama Sage and try to find followed by the dancer with the song good 2013 but I could speak UTS so UDS enables different kind of thing like resetting is use which can be quite interesting queries specifically ideas is that a read it information stuff like that of all of the nicest of flight don't assume well all the available through security session and secrete decision on the skull requires an authentication through challenge response can of algorithm so here is the example of that I would propose out the domestication UDS they fission 1st then of query foresee that to get a student figure decision of cont'd Monsanto said died the cost computed on answer compare and I would fail because I would just send seen by like maybe they didn't implement real algorithm and you never know but that again well done but they and they did quite well actually of the car as a Fulbright see that it which is different at each strike this is important entities because on jumps got it's a two-byte seed which is always the same by the U. of Mauthausen more than 3 seconds required between each try and if you fail multiples times it would just freeze fall 10 minutes if you don't want to remove the bad for you all that kind of complicated stuff so how to break this brute-force wait too long at the timing at that would would be too and stable because of the pre reading kind of thing because you can just get delayed by all the more important messages and so it would do your timing attacked this is a symbol the cow is out of the question you know why and get PCs from a repair shop is to just you know get and you try to recreate the canvas around survivors but then broke so that that of having a moment OK so my call that sum up way too old Byron Moses got the tourism because of the gateway by from these guys Alonso where the 2014 so even more recent but it has you can make full maybe for another time was less than 0 money so my mom has a 2 in 7 and 10 sets 500 convertible she loves it so she doesn't like when I take it and she even more doesn't like when I try to do stuff with it ISO so 1 nite I stole the key it sorry and I try to blame myself in all the talks he talks a lot of being false against I was about to get to 7 or on the state so it's about 500 messages by 2nd trees gateway so I have a lot of broadcasting message any I from few deeper friend of attrition ideas so 2 different the use option talking on the bus so when aiming the God tried pressing random buttons then I see that that that that evolves so the nice funny things to do is to try to understand what each message means it's quite tricky with them with the which is the standard lineage utility which you will just through the yacht as to the out we stand messages but Python can money help so that they of grouping messages by arbitration ID so here I mean the sunset 500 and now young driving actually as you can see the different arbitration idea there and g of that that is evolving is it to less 1 which are way bigger houses standout OBD means OK I have a priority that that is way lower is and he was a kind of messages so reversing debate what can we find a iPhone the speedup of full-time because the values of all were quite different but quite close anyway so was it that 4 different time all at the 4 different wheels and it was actually into 4 different wheels because when I turn it would have changed drastically 2 values of the 4 of i of the clutch they don't we is respect is accurate by accelerating was depressing opera singers the clutch of the breakdown of dolls close which 1 are close the compact and easy on break up or down and this 1 is quite interesting because it would change every minutes actually it's the time and date so it was 9 PM on the 24th may of 2007 the meaning of that they created an
ECU would which only job was to send that is the current time and date readable in exodus signal from what on the conduct yeah like this and but what about those I found it funny I've where the sense of humor and with so this thing even most of his time to explain to my mother what ending with the call so this was a can also capture was doing from good to my home I like it was recording what I was doing in the cop recording at the same time the conduction band is playing with they could display so of the home break start and stop and gene is on OK it seems to be the doors are closed hopefully fully OK so this was the 1st quite centered at the OK what can we do we that can we do something useful for him and can we do maybe something a bit challenging all as a protein that interesting all can I at least put something on my resume after that something I can be proud of yes all we could try to do something completely stupid and that's what I was aiming to do so I created 10 but z ideal scanned bad is that with the steering wheel of break and then the the value can drive any cannot in any video game yeah the so the and so that's what they did I take the idea the 10 messages from obese and then but possible to up he said that by something and then some of them screw you you input to be able to create of the actual game pad and place in the so the drift easy either an open source of a racing game that allows 1 to play on Linux true at least you inputs so this is a start and stop but under the use of the Togo to send that up and here I'm driving it with my mom skull and because the game and so I have the steering wheel of the break of the all every bit of it it's quite it's quite hard to drive right now and my official goal is to so 1st I have to learn how to drive up all of the tools to actually quite nice when I managed to do anything at all it feed into that is only like 16 by all of it the next and thank you thank you to the world that the reason I was able to do on this again so I was actually quite disappointed right now so feature the limitation of this so the future is what it was like playing right now but the limitation all that the energy need to be running did because as I don't have the dead direction which makes the will quite hard to turn and also on the real challenge you really the steering wheel it will by itself try to match the Calif direction which I don't have so I would just spend all my time turning the will and the concert simplicity going through are you beginning to its limits it to the Trieste because of laws of in the end recognize my dear plugged by the as a real 1 so I was quite side and but I really wanted to drift all right I created another way version which is 10 thousand to 10 the 2 I just I understood that on the real game by game boats it's books is bugs again by the if I plug that but stem bad and don't touch anything you know the inputs will be sent on the on the other hand if I put appears full again by the and don't touch anything it would slow the status of every but then all the time so what they would do is take the and what's going to put it on the table and I jacked export to send that that instead of it so I would have little real played in controller that is recognized by nice against like the drinking like the and they could send inputs by it sense of ice changes few stuff like the gas pedal because I had to small in the real world to fall in the game which was quite a show consuming of you the steering wheel rotation that I was of adjusted so that is much much is the rally cars like if I turn the 180 degrees it was done all the way the get so like I said and I the direct common to query and breaking the interview and they did see that when I turned the avidly is again and I really is at the same time the unbraked z will take a little bit of time before stepping to turn in because I have a small delay but now I have the real Rio input for its way easier so demonstration so friends and it I thought of and so I just want to see the value in
the way you place because of
the spinning wheel which was that just this is the way it is it is trained by uh I I'm my brother who were very fond of the my mother was only thinking about the tyres right now and it sorry as and it is the title of the song later John so I can know
drinks with my front wheel drive car in any kind of video games
which is almost scored very nice
so up until this year 0
0 words of breadth of I could get the gearbox
that used to put the call on the least and try
to put it in my know which would be of a bit
more of my most most kind of
and create a better game that's that I'm able to raise
some Michael windows because right now it's on the on
Linux the loop OK this was
but it was actually consuming a lot of
gas for missing so we've geome we try to
find a way to reduce gas
consumption and that's what you would is going
to talk to you about right now your if there
had to uh so if the problem about to death consumption and the from the worst told us about this little of natural will be doing go which is supposed to save fuel is sold on Amazon and the reviews are quite do so is that OK 10 but OK that's fights in the 1st of all just a reminder about the what is an nobody to dongle never did you don't go is a small device uh that you planning to ability to ports of your car uh any recent common has to port to constrain the by googling the balloon model for color and port and you will find the charts and the interesting thing is that you just have to prepare panel to access to your ability to reports and is recall because you don't have to take anything apart or whatever so uh just by the thing on Amazon would pull the panel put it there that's all um so there's supposed to have this issue by reprogramming the main issue you the engine is you of your car and this is don of of 4 . sometimes this is known as a chip tuning and you can find it on the internet uh which works pretty well true bridge around your own to but the very interesting thing about this dongle is that you will not break your unwarranted because it you remove its you will go back to factory settings and this is very new so it works on any drama or any reason terror and uh well it seems to work really well OK and so what what what did we reverse engineering don't go in and for the Justin amusing piece of hardware if you think about it which works on in our and and it also with programs and stuff so it must contain all authentication codes but time explaining the challenge and response mechanisms so this 1 contain all of them uh moving it will also contain the around the reprogramming of software for in-car of any manufacturer and this is also just amazing and I just wanted to have a look at this and it is able to adapt itself to the way you are driving force should you images that it work for your engine and I say what was the other smart algorithm inside this is small piece of hardware and I just wanted to have a look at the software and as I say that also it also modifies the right of your engine and uh I was not aware of anything that will be able to do that because of the from the things I know but should change it will change the flesh of your ECU that's where the warranties broken but not this 1 but not this 1 and this is just amazing I just wanted to have a look at the source code or the binary but so uh the the 1st thing about sort of the reverse engineering such a piece of hardware is monitoring the can signals of to see if it's talking and I want to know what it is doing exactly opening security sessions or not uh well all this stuff so I mean here this in my term there is the ability to port right there and I used the same configuration as time to recalled that can messages which is a raspberry pi here and the pi can chew shields and well just a because scope to check the signals and contribute to the moment of this uh and the thing is you just have 1 will be to in in the car and here and you can applied at the same time the don't go like like this and some of the the the Warriors for the rise very hard so from which we took parts of the dongle and the star orbital reversing the PCB is which forms can of lines and bronze and we just sold out it's free wireless moments and was that using this approach you can reverse uh the messages sent on the bus and the interesting thing is that as you are plugged directly on the dongle you will monitor exactly was what the what the dongle is doing and what he's saying um just just for reference to just have 3 orioles to put a newcomer to hijack or to communicate on the canvas built on a can hire candle and the ground and that's basically all you need to to connect to a canvas just for reference you find onto this Council we can find many many canvases uh in uh and in the different parts of of the are sold over the true reported is just more accessible but is basically under the candles just like the long OK uh and so the thing we did through the measurements 1 we is uh basically nobody you're going go and uh and this the 1 with the the development stand explained the 1st part of the presentation that every can message
he sends by and you and the identifier of the this you know it's called the messages idea and and the lower 2 is the higher the priority is the arguably of more you up 2 of the most of prior where the message was the biggest priority and here with the lowest priority and you see here about the content of the messages I think the thing is if you look at the list of the message is here and a list of the of the of the message and is there you can see it's the same it's basically it means that we know all the ECU what I was talking on the bus but when we lived over the the Nitro beauty to so it means that the donor was it doesn't speak at all on the canvas and that's too bad because we said Hallward how is it possible that it works if it's not talking about and that's OK uh is it or is just not working uh well not really uh the dongle is advertised as a working after 120 kilometres which will just listen silently to the where you driving and then reprogram your engine after just a small small amounts of of pure images and so it was still possible that the don't go but was not sending anything during the 1st 2 images and but we couldn't just monitor or other can thus during such a period of time and so we needed under the porch uh and we choose to are reserves the PC um should should take the dongle apart you can see through this city's uh the first one here just connected on the uh the true of reports and the other 1 seems to contain or something uh meaning OK so this is a picture of the first one as you can see there is no compliments on it's all just routine that it can miss the can warriors from there to the 2nd also gives from uh and the 2nd 1 is more interesting um on the front side you can see the a few conference but they are not so many of you have a voltage regulator here uh 78 or find the person but this value this this is part of the voltage regulation and that's pretty much all you have your ancestry that's just that's focused on the back side that you can see here there's the the footprints of a small microcontroller and of he reads the picture was before the disorder and its and the interesting thing is that there is absolutely no reference on this device as if the manufacturer took a special care to hide what was inside of and this is not so common because usually you can find a reference the chips so um Our yeah also and there is no conscience here on the basis of could you have changed uh and what is the conference here again transceivers especially it is a piece of hardware to translates uh the signals from the CPU which are basically if you walked into can signals uh which our can hire includes differential appear around the that's also and it's but this difference is not just about editing the signals and electric conversion it's also about real-time monitoring and checking the stand explained before but in each frame you go to CST and uh and their orbits and if there is a transmission of all on on 4 in the end can transceiver has the duty to Aesop's defaults in real time so just have just has a few microseconds to to compute distances in real time and say OK no do you just have to discover from so uh basically to task for this from electrical signal conversion and checking in real time uh OK so we have no coke milk and communication No can transfer period smells weird uh if you guys told us here but maybe it's possible to do that in software because you said the largest signals and maybe with emergency and so on you can do lots of I put a link to you interested here for obstacle for discussion which is very interesting and a few days OK yes it's possible to those that full software so you basically don't need a conscience here and the thing is the as the conscience here has to react in real time you have to have a very fast CPU to do that in real time and the guys in cycle flows said OK it's possible but uh at to the realist p like 10 kilobits per 2nd so something like this but on a really kind some real car you of the is more like 5 100 thousand bits per 2nd so it's not the same of magnitude so uh but and then some the some of the guys said OK maybe there is some of the tensions inside should and the search the nodes is just a small it's a opiates ship there's nothing there just a small microcontroller but just to be sure because we like to the touch it's just my instrument to do that because you know how that'd subsumes and things like that so the
clearest and this is part of my job in and uh well just for the for the 1st time I did that in the final so and the thing is it's pretty easy to do that but if you want to do just be careful because it's very dangerous stuff that you can buy come in on the Internet is very much the uh and uh what did you need that cooking plates here to produce some heat uh crumbling of all and you just the ceramic plates you forward Lucifer dissident it's you word for it to be hot enough and but for basically just for a chip in its and you're done uh just which so 10 minutes and that's all um so again if you want to do just do it because it's fun but so these provisions because it's very dangerous market well there is the results time can erase here here and this is the uh the chip you have in the natural Beechwood longer uh as some of you were you will recognize the basic structure of a microcontroller for small market and for the of the this if you would carry on the memory banks and of some glitches there and that's pretty much all you have their uh the interesting thing is that this does not fit into this solution until there is no attention to and to deny attributed to dongle um um en then the interest of the other thing I would like to show is that something is you look at this uh we use it before but the the the attributed to had to contain a database for all of and additional algorithms older which work program and it from the market and so on and this is all the flash you have inside I was expecting at least the chip of fashion but there is nothing in so basically you just look looks like you obtain a microcontroller conformal like an Arduino assumption and this and but I will rented to to know what should it was so already so we have a game of deficit through this is just looking for Waldo and because the chip manufacturer like 2 of the rights of such a preference inside the ship and 1 of the assumption here uh you much of the is the big magnification were you will see this and this is the chip preference unfortunately I could not find any reference on the Internet about the chip this chip right after few friends on Twitter and so on but nobody could could find it which means what I don't know this is not a bit should very well-known uh mission what it is just coming from the fundamental whatever to win in the microphone during the questions transition to the next so just the sum of the spot on the very nice but there's no can communication does not contain any attention sir it has not enough power of the CPU pour religious like accountants eventful software and who are the most important thing is that he has no flash in uh to contain the database you know to reprogram and the engine and so on but the links are blinking level so that if you really want to report on your car you something else thank you has to have few have all would like to invite so all of you or if you are interested in the parking tool to try and put some of it if you want to look at all because varies the pool of funneled through that system will be the uh you just the the uh 10 children cable and of which is on the uh maybe just a few words uh so you don't need to think anything about it's but it's pretty easy and you can do many interesting things occur just by using the which report of your car in and so on but so please be careful it can hurt yourself or break engine it's running so if you do some phase includes the mentioned before having the because as you so at the beginning I was actually recording can that all Koreans status while I was driving driving which was just to do thing ideas from the old underlies this I was able to disengage ABS by something to talk like this because they have some of system that leave their received too many kind of message if they would just shut off so I was able to then get stuff like this so what you have is shoving stuff like this just don't drive while doing it definable sets again a stupid mistake you went all disable the airbags and those are important the level of the play in the game and if you want to do this because no mother the model will come into you if you have to have a negative number is give the time index this was really using in that and not and it didn't do that we have a lot of tens of questions and if you want to line up and this 1 will be allowed to over there and 1 of which he 1 of them can how they questions from the audience Signal ideal on so it almost wondering right broken find your software and whether you contributed a signals a found to the open dynasty project that has collected signals from the Campbells it I have come to know you heard about this yes but this is so right now I'm not that much but I will take a look at it will take a look at the ideas after after this sorry 1 of forming you try to reverse engineer to get into this a few months so that's a connection all the issues so you want to and we have presented in this challenge response that indication and I did not try to reverse-engineer the diagnostic should find its use that adidas because of this invention we call these bodies of litigation and costs you if I recall correctly about 5 thousand euros by car manufacturers so we went to a garage and analysis of the guy can you lend that's your values and he just lost at us because no you don't want to but uh yeah the there is some partnership taken out of the group also manufacturers of that tendency for information you pay every month a very huge sum of money the last 10 years for now the island of it I just so of the members in the minds of all again find another way 9 and the a great presentation thank you very much so I was just wondering how much more work is needed to actually control your car with an export control of and I and I will of the question before not that much if I need to find the right guys in with the right amount of knowledge and the idea that and you'll get you'll get of course you have to find a way to control this is the the cost from the canvas which is not something that is done because for all I know right now of the canvas I was on was only used for broadcasting information not really using this information for real time so that that we actually try to find some way to the middle of the use of
interactive feature that means young call so the idea was that we go to a field and I am on the passenger seat and you just tell me OK try to find the ABS is you will drink very hot so you're very fast everything was just shaking the plane which you would actually send something different and after we try to recreate the messages but without a lot of so from the canvas I don't think that's quite possible but they did in the sense that it like 2 months ago we the and Jedi all see they created the subject the other thing is actually controlled by the game but control that they have of full revolt in it's just converting the steering wheel and do that so it's quite easy when you have money you think it might mean to in the bank please OK uh and my talk thank you come in 1st of all I don't play around with the addicts please try to reverse-engineer mild Mitsubishi passionate Mitsubishi gravel um please don't reminded you could put really on 2000 and so I'm really question Institute try to rescind in years and cost within all the bus then nobody because minus from the nineties yeah I know I didn't because I I have my hands full already with the with be up to be together with the fall these analyzes I hadn't that any kind of plus or any kind of gasses than have so I was ready the covering everything from scratch so I just focused on the OBD port and the candles and stuff like this but I know there are lot of different styles of and I 2nd already did a different kind of attack on the G for example all the Prius with different busses so I are all to be looking at them but I didn't do anything else from the overview of is 10 on this in the Internet and that became otherwise and like 1 just on in the k so it wasn't sentence of I guess because of the Mitsubishi stuff he mentions that call the parents of so I guess we should talk about the lens focal OK OK In the complained they can there are some other classes like an ESA cattle FlexRay another common effectors and what about taking them out so you also said you already said that and maybe you we will try in the future on well quite the same and so I a so I really can't and so I just have a few of you lot of the other kind of of particles and both of the right now I didn't do anything I am of planning on train different of innovative like knowledge of the which by country and so long as the event is I don't know about the other thing is that some on the beach report you just have access to the canvas and uh as far as I remember all the slides because of the effects of a bus is internal and the ability to have the busses so um it's not as easy to to put yourself into this onto this bus um because you have to open new Comdex uh things about of the this but it's definitely interesting to look at also 1st again and another question this 3 kids FIL itself OK so just a little hint the 2 was actually just half of the fund so you should definitely removed for your current your and check if the Secundus behind that final for BMW had and they of course that it's much easier to control of all of the offensive items that you have your hand like a window and wipe us and all that stuff because that's completely unencrypted and so on so this and this and also the months or if the change in Canada thing the part yet and as many of the currently we just don't have to have anything just read the target of the taken that out and put your lesson that include her idea of upon and here we have a list of the internet now and then the 1 and so there's person from the documents who would like to leave you original diagnostic software for that kind of hardware and so because most of the dataset that that I am are at the end of the fact that of the beginning would you be interested in software of original diagnostic software and thank you to all have representations of the system and then you're going to play a lead yeah questions came up with thank you for a very inspiring speech likely or unfortunately I don't own a car myself otherwise elements sailors and you Nyanza on a few false finance and you could use a car yourself a what brand would you like to monitor the removal of a actually what I want to but they haven't taken the time right now was to play with the on the on the the most of because it has you connect and that's father remember it was 1 of the eigenvectors and the mean and but I think he is but in the past so I think it would go with the 1 with full feature everywhere and remove spots to be able to get to the fun stuff so I would take 1 with a lot of electronics not too much because it's expensive but at least a bit of it trade so that I can remove players doesn't do interesting here and I thank you OK and another 1 of the best I think you mn and try to talk and I think I worked you already online uh were the I where something about doing that what you've done and really fun uh just a few correction to the last part at UNC but does not do any error correction it's just a from the uh and uh there is objects actually available whichever cortex and 0 on the 20 on for a few bucks all those to success and are used in model for and just for your time for the next year uh choose to write card just appending that Christians from that group and the outcome manufactures who can do networking and who come to you and to your let's say you are kindly with the white brands let the tangent of same thinking river in a way more information that when I started this talk which is the 1 with the students and and my final this in mind 1 but it's more questions but that you consider lifting the from field instead of starting the engine to make steer the yes I put it on I'll be talking about all of the local of and you find the right it's not not the easiest part of what would be an easier what was done was to put cobbled and under the wheels to make it easier with Little bit of all turns but yet to be able to play with the energy turned on and with the as cystic direction can allow the parties are colocalized would be the safest way because just sitting in the front with I wouldn't from the windscreen which would be a bit disappointing is indeed I plan to put it on a constant stream anyone didn't it tends to have the president of the attention of a species can be approached makes did things again being injured on the river there was tubes that 1st
of all you need if there is an it would not be
concerned with the
t-Test
Familie <Mathematik>
Kraftfahrzeugmechatroniker
Zählen
Analysis
Internetworking
Ausweiskarte
Systemprogrammierung
Dijkstra-Algorithmus
Physikalisches System
Reverse Engineering
t-Test
Protokoll <Datenverarbeitungssystem>
Computersicherheit
Maschinelles Sehen
Hardware
Softwaretest
Beobachtungsstudie
Quarkmodell
Kraftfahrzeugmechatroniker
Hardware
Computersicherheit
Reverse Engineering
Systemaufruf
Physikalisches System
Gefangenendilemma
Polstelle
Software
Mereologie
Verbandstheorie
Liften <Mathematik>
Eigenwert
Computersicherheit
Mathematisierung
Bit
Umsetzung <Informatik>
Prozess <Physik>
Gateway
Gruppenkeim
Computer
Homepage
Eins
Einheit <Mathematik>
Standardabweichung
Speicherabzug
Phasenumwandlung
Schnittstelle
ATM
Winkel
Klassische Physik
Systemaufruf
Abfrage
Quellcode
Datenfeld
Menge
Einheit <Mathematik>
Information
Message-Passing
Subtraktion
Decodierung
Existenzaussage
Firewall
Zyklische Redundanzprüfung
Zahlenbereich
Maßerweiterung
CAN-Bus
Broadcastingverfahren
Physikalische Theorie
Systemprogrammierung
Message-Passing
Informationsmodellierung
Bildschirmmaske
Verkehrsinformation
Gateway
Autorisierung
Protokoll <Datenverarbeitungssystem>
Konvexe Hülle
CAN-Bus
Datentransfer
Telekommunikation
Physikalisches System
Quick-Sort
Energiedichte
Minimalgrad
Kollisionserkennung
Whiteboard
Parametersystem
Digitaltechnik
Mereologie
Codierung
Gamecontroller
Bus <Informatik>
Retrievalsprache
Abstimmung <Frequenz>
Gewichtete Summe
Momentenproblem
t-Test
Versionsverwaltung
Information
Netzwerktopologie
Wechselsprung
Mehrrechnersystem
Algorithmus
Umwandlungsenthalpie
Gruppentheorie
Computersicherheit
Speicherabzug
Protokoll <Datenverarbeitungssystem>
Kontrollstruktur
Gefrieren
Figurierte Zahl
Computersicherheit
Güte der Anpassung
Klassische Physik
Systemaufruf
Abfrage
Firmware
Übergang
Gruppenoperation
Konfiguration <Informatik>
Entscheidungstheorie
Menge
Grundsätze ordnungsmäßiger Datenverarbeitung
Information
Schlüsselverwaltung
Message-Passing
Lesen <Datenverarbeitung>
Aggregatzustand
Standardabweichung
Subtraktion
Ortsoperator
Sprachsynthese
Message-Passing
Multiplikation
Polarkoordinaten
Authentifikation
Endogene Variable
Videospiel
Gateway
Operations Research
Hilfesystem
Protokoll <Datenverarbeitungssystem>
Graph
sinc-Funktion
Zwei
Softwarewerkzeug
Symboltabelle
Physikalisches System
Bus <Informatik>
Authentifikation
Retrievalsprache
Kreisbewegung
Maschinenschreiben
Unterring
Bit
Spyware
Mathematisierung
Versionsverwaltung
Gesetz <Physik>
Richtung
Datensatz
Computerspiel
Prozess <Informatik>
Torsion
Reelle Zahl
Spieltheorie
Gamecontroller
Kontrollstruktur
Inverser Limes
Graphiktablett
Gerichtete Menge
Open Source
Anwendungsspezifischer Prozessor
Systemaufruf
Strömungsrichtung
Ein-Ausgabe
Inverser Limes
Programmfehler
Videokonferenz
Energiedichte
Minimalgrad
ATM
Gamecontroller
Wärmeleitfähigkeit
Message-Passing
Tabelle <Informatik>
Prozess <Informatik>
Familie <Mathematik>
Leistung <Physik>
Loop
Bit
Dicke
Computerspiel
Spieltheorie
Reverse Engineering
Bildschirmfenster
Spieltheorie
Systemaufruf
Wort <Informatik>
Räumliche Anordnung
Steuerwerk
Mereologie
Momentenproblem
Freeware
Natürliche Zahl
Bridge <Kommunikationstechnik>
Analysis
Internetworking
Algorithmus
TUNIS <Programm>
Reverse Engineering
Faktor <Algebra>
CAE
Einflussgröße
Gerade
Kraftfahrzeugmechatroniker
Hardware
Installation <Informatik>
Computersicherheit
Globale Optimierung
Quellcode
Spannweite <Stochastik>
Forcing
Menge
Rechter Winkel
Zellularer Automat
Drahtloses lokales Netz
Message-Passing
Dongle
Kombinatorische Gruppentheorie
Term
ROM <Informatik>
Datenhaltung
Message-Passing
Bildschirmmaske
Informationsmodellierung
Authentifikation
Software
Endogene Variable
Optimierung
Softwareentwickler
Konfigurationsraum
Bildgebendes Verfahren
Algorithmus
Dongle
Quick-Sort
Endogene Variable
Mereologie
Codierung
Bus <Informatik>
Authentifikation
Faktor <Algebra>
Kantenfärbung
Verkehrsinformation
Resultante
Bit
Umsetzung <Informatik>
Gewichtete Summe
Gruppenkeim
Computerunterstütztes Verfahren
Information
Analysis
Übergang
Internetworking
Komponente <Software>
Negative Zahl
Algorithmus
Standardabweichung
Reverse Engineering
Speicherabzug
Translation <Mathematik>
Kontrollstruktur
Emulator
Default
CAE
Phasenumwandlung
Syntaxbaum
Hardware
Datenhaltung
Ideal <Mathematik>
Mikrocontroller
Frequenz
Atomarität <Informatik>
Ereignishorizont
Konforme Abbildung
Software
Twitter <Softwareplattform>
Betrag <Mathematik>
Menge
Rechter Winkel
Automatische Indexierung
Festspeicher
Identifizierbarkeit
Projektive Ebene
Information
Message-Passing
Maschinenschreiben
Telekommunikation
Subtraktion
Dongle
Rahmenproblem
Gruppenoperation
Kombinatorische Gruppentheorie
Zentraleinheit
Task
Flash-Speicher
Message-Passing
Knotenmenge
Informationsmodellierung
Spieltheorie
Software
Endogene Variable
Indexberechnung
Abstand
Inhalt <Mathematik>
Datenstruktur
Optimierung
Bildgebendes Verfahren
Leistung <Physik>
Analysis
Einfach zusammenhängender Raum
Dongle
Zehn
Mikrocontroller
Elektronischer Datenaustausch
Datentransfer
Telekommunikation
Mailing-Liste
Physikalisches System
Binder <Informatik>
Datenfluss
Regulator <Mathematik>
Echtzeitsystem
Whiteboard
Offene Menge
Flash-Speicher
Basisvektor
Dreiecksfreier Graph
Mereologie
Gamecontroller
Bus <Informatik>
Wort <Informatik>
Größenordnung
Entropie
Geheimnisprinzip
Verkehrsinformation
Ebene
Telekommunikation
Bit
Subtraktion
Wellenpaket
Röhrenfläche
Mathematisierung
Selbstrepräsentation
Klasse <Mathematik>
Gruppenkeim
Element <Mathematik>
Internetworking
Richtung
Streaming <Kommunikationstechnik>
Dämpfung
Reverse Engineering
Spieltheorie
Software
Eigenwert
Vererbungshierarchie
ART-Netz
Soundverarbeitung
Fehlererkennungscode
Hardware
Datennetz
Systemaufruf
Mailing-Liste
Physikalisches System
Ereignishorizont
Chipkarte
Objekt <Kategorie>
Konstante
Energiedichte
Datenfeld
Rechter Winkel
Mereologie
Gamecontroller
Bus <Informatik>
Partikelsystem
Information
Verkehrsinformation
Hypermedia
Medianwert
Systemprogrammierung

Metadaten

Formale Metadaten

Titel How to drift with any car
Untertitel (without your mom yelling at you)
Serientitel 34th Chaos Communication Congress
Autor Heilles, Guillaume
Lejay, Stanislas
Lizenz CC-Namensnennung 4.0 International:
Sie dürfen das Werk bzw. den Inhalt zu jedem legalen Zweck nutzen, verändern und in unveränderter oder veränderter Form vervielfältigen, verbreiten und öffentlich zugänglich machen, sofern Sie den Namen des Autors/Rechteinhabers in der von ihm festgelegten Weise nennen.
DOI 10.5446/34939
Herausgeber Chaos Computer Club e.V.
Erscheinungsjahr 2017
Sprache Englisch

Inhaltliche Metadaten

Fachgebiet Informatik
Abstract Lots of research are arising from the fairly unexplored world of automative communications. Cars are no longer becoming computers, they are fully connected networks where every ECU exchanges and operates the vehicles at some point. Here is an introduction of my immersion and discussions with my car, and how I finally managed to drift (a bit) with my mom's FWD Fiat 500c.
Schlagwörter Security

Zugehöriges Material

Video wird in der folgenden Ressource zitiert

Ähnliche Filme

Loading...
Feedback