CarPlay at Risk: Unveiling Security Threats of Third-Party Infotainment Adapters
summary
Reverse engineering of one aftermarket adapter using a USB sniffer, log dumps and static binary analysis shows the adapter reproduces iPhone behavior and establishes CarPlay by imitating USB/ICP exchanges; USB packet differential analysis and firmware inspection reveal MFi certificates found and ChaCha-based crypto with only minor byte deviations. The result: CarPlay allows one‑way authentication, enabling video playback, possible CAN injection, privilege escalation and malware via embedded Android/Play Store; proposed fixes are two‑way auth and stronger device attestation.
AI-written summary · about
chapters (9)
- 0:00Introduction to car adapters
- 0:35Understanding Apple CarPlay
- 3:56Adapter capabilities
- 4:54Analysis methodology
- 6:15USB packet analysis
- 7:54Authentication packet study
- 8:49Log and binary analysis
- 10:21Security threats and mitigation
- 14:02Conclusion
related talks
41mA Worm in the Apple: Wormable Zero-Click RCE in AirPlay... (Avi Lumelsky, Uri Katz)
54mAnalyzing the Security of Mobile Apps for Automobiles
46miOS Trustjacking: Trust Has a Price
41mPanel: Tackling Automotive Hardware Vulnerabilities
42mDiscovering and Exploiting Novel Security Vulnerabilities in Apple ZeroConf
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
40mUnlocking the Drive: Exploiting Tesla Model 3
37mAutomatic Automotive Hacking