DEF CON 32 - Speed Bumps and Speed HacksP: Adventures in Car Mfg Security - Paulo Silva, David Sopas

Since the first car hit the road, manufacturers have been obsessed with safety. But hey, as AI wisely points out, determining the absolute 'safest' car can be as subjective as trying to decide on the best pizza topping! So, we decided to shift gears… into the world of car manufacturers' (application) security. In this talk, get ready for a wild ride as we unveil the security findings from our research, affecting at least eleven major car manufacturers. Buckle up, folks, because your favorite brand might be on our list—along with your personal info! Bring popcorn to watch some proof-of-concept videos. With this talk we aim to demonstrate: that modern Web Applications are still affected by old/traditional vulnerabilities, how security issues can be chained together to build real attacks/demonstrate impact, highlight a common pattern on running unpatched third-party software, how organizations benefit from a responsible disclosure policy.