Connected Car
Don’t confuse automotive security with automotive safety, things like functional safety (FuSa) and ISO 26262. In a modern connected car, there are two places for security vulnerabilities. At this point, we started a group chat and all began to work with the goal of finding vulnerabilities affecting the automotive industry. The following writeup details our work exploring the security of telematic systems, automotive APIs, and the infrastructure that supports it. Most of the rest of the piece is a detailed description of the security vulnerabilities they found.