We are in the car hacking village yet again looking at a go-kart hack right now.
And Homeless Hacker has been breaking away at this thing.
Are you able to tell me sort of like how have you approached this problem?
And is there known vulnerabilities you're trying to hit or is this all like kind of from the ground up?
This is all from the ground up. We're just trying to figure out what's actually communicating.
Throwing everything in the kitchen sink at it.
So let's start with a simple one.
How do you start? Like I'm a noob. I've never done this before. What do I start with?
So what we're actually working with is software-defined radio stuff.
Getting yourself like a hack RF. Starting to understand GNU radio.
Starting to understand... what else have you been working with?
GNU radio, GQRX and different tools like that.
So you can actually see what's happening and what's being sent.
And that lets you hit the communication between...
Yeah, so just like part of what started it was the key fob for the Honda.
So first we were trying to just capture the information from a key fob to see what was happening with that.
To start learning how this interacted with the rest of what we were doing.
And then starting to turn this on, turn it off and see if it's sending any type of signals that we can capture.
So like in that example you can... I'm guessing you can clone that signal.
So this one, yes. The young man behind us actually did...
He's the gentleman who figured out with the Flipper Zero how to lock and unlock Hondas doing a replay attack.
Oh wow, okay.
Yeah, so it's been fun like kind of taking his research and seeing what else we can do while we're here.
Is one of the things you're doing is grabbing for instance of a replay.
And then I would say disassembling or trying to understand what it's doing.
And then you start flipping bits to see would that have a negative impact on this?
Not necessarily flipping the bits on this but like there is a little key fob for this thing.
Right now we're just trying to get everything set up so tomorrow or later tonight when we've had a couple beers we can sit down and keep doing it.
And what's your overall goal you're trying to do?
Launch it off the table.
Just trying to figure out like if we can turn it on.
So you don't have, do you have access to the controller for this or no?
No.
Oh okay, so that's the piece I was missing.
Yeah.
This is the controller for another device.
Yeah.
You're trying to without the controller to recreate the controller for this.
Yes sir.
So that you can turn it on and launch it off the table.
Well that's why we actually took the wheels off the back.
So have you actually, do you hardwire into it at all?
No, we're just trying to see what we can do without ever putting our hands on it.
Hold on, let me get, I'm going to steal the mic.
Because this module, this co-card has a Bluetooth communication.
And you know, traditional Bluetooth communication is malicious.
You can compromise it easily.
And we try to figure it out how we can remotely control it.
And how we can address it for a different purpose.
And make some fun.
This is a really cool project.
Oh, good question from Gauri.
How long have you been coming to DEF CON?
Five years.
Five years? What about yourself?
DEF CON 13 was my first DEF CON.
That's awesome.
And is this the first time you've been in the Car Hacking Village?
No, I've been helping them for the last three years.
Three years. What about yourself?
Sorry?
How long have you been helping in the Car Hacking Village?
Oh, this is my first.
This is the first.
So you decided to sit down and start hacking away at a Go Kart.
This is awesome. Thank you so much for sharing what you've been doing.
Thank you.
Thank you for watching.
And as always, HACK ON!