Jay Turla - Car Infotainment Hacking Methodology, Attack Surf

### Automotive Infotainment Attack Surfaces At 00:00, Jay Turla delivers a comprehensive methodology for hacking In-Vehicle Infotainment (IVI) systems at the Packet Hacking Village. Turla highlights that as vehicles incorporate modern operating systems, head units have become prime vectors for compromising automotive ecosystems.

### Remote Vectors: Bluetooth, Wi-Fi, and Media Parsers At 07:29, Turla explores wireless and local attack surfaces. He reviews vulnerabilities in automotive Bluetooth protocol stacks, connected Wi-Fi services, and multimedia file parsers, illustrating how memory corruption vulnerabilities in media codecs allow attackers to execute arbitrary code via malicious USB drives or paired phones.

### Hardware Reverse Engineering and Storage Extraction At 15:06, the presentation details hardware reconnaissance techniques. Turla explains how to open infotainment consoles, identify circuit board pinouts, locate serial UART consoles and JTAG interfaces, and extract eMMC or NAND flash storage chips from platforms such as NVIDIA Tegra boards to access unencrypted root filesystems and embedded credentials.

### Bridging Infotainment to Internal Vehicle Networks At 23:25, Turla examines pivoting from compromised head units to internal Controller Area Network (CAN) buses. Citing prominent automotive security research, he explains how poorly isolated gateway processors enable attackers to bridge from user-facing media consoles onto critical vehicle control buses.

### Hardening In-Vehicle Infotainment Architectures Concluding around 30:49, Turla provides recommendations for automotive manufacturers. He emphasizes strict microkernel isolation (such as QNX or hardened Android Automotive), robust secure boot verification, disabling unused debug interfaces in production, and implementing physical gateway firewalls between IVI systems and safety-critical vehicle ECUs.

(AI summary — Gemini Flash)