30/10/2026 –, Track 2 (306A) Langue: English
In this presentation we will evaluate the security of one of the most popular dash cams on Amazon, with the goal of answering the question, “Could we, as an unauthenticated attacker, disrupt the video communications in a temporary or permanent way?” Julian will take you through his journey of reverse engineering a high-end dash cam, the vulnerabilities he discovered along the way, and the surprising discovery that this research affects an unknown number of other popular dash cams. You will walk away from this presentation with a deeper understanding of hardware hacking, reverse engineering, and the risks posed by insecure consumer-grade devices.
Note
These vulnerabilities are currently awaiting disclosure, through the Carnegie Mellon CERT, as such I have redacted the device name in the talk outline however they will be made public within the next 30 days.
As a Senior Penetration Tester at Software Secured, Julian hunts for vulnerabilities across a range of clients and products. Off hours, he spends his time performing vulnerability research against IoT devices and FOSS, amassing over 50 CVEs in the past several years.