hakstuff

Hi, my name is Tim, and I hak stuff
- bsky: mastodon: [email protected]

[hakstuff @hakstuff]

The blog post can be found on my website here: https://t.co/jn8bnLs7jq

[hakstuff @hakstuff]

Woohoo, new blog post done! This is my deep-dive OSINT research on the new BMW IDC EVO infotainment system, based on the Samsung V720 SoC

[hakstuff @hakstuff]

While it can be a pain manually lasso-ing out a PCB in photoshop, the results compared to the AI assisted "smart select" are night-and-day better lol. My manual lasso on the left, "smart select" on the right (note the fuzzy edges, chunks of background still included, etc.)

[hakstuff @hakstuff]

It's crazy to think how fast automakers iterate on infotainment systems. It's still hard to find used IDC23 units on eBay, and yet the next gen is already coming out! Maybe this is just my first exposure to the weird gaps between the new and used markets for car parts, haha.

[hakstuff @hakstuff]

The new BMW IDC EVO! This is the latest infotainment unit in the brand new BMW "Neue Classe" vehicles (like the i3 Sedan and iX3)

photo not mine, it's from the FCC listing

[Gruppe @gruppeos]

ブラウザ擬人化

Chrome / Edge / Firefox / Safari / Brave (リプライ欄)

#ブラウザ娘

[hakstuff @hakstuff]

@LiveOverflow I love my Fujitsu ScanSnap. It's a medium size, but allows you to load in a whole stack of documents and will quickly scan them all. Can even combine multiple pages into a single PDF, automatically OCR and embed text to make docs searchable, and other cool tricks (not my pic)

[Cadence Agyirey 🇬🇭🏳‍⚧ @kubedoll]

ai labs use "sandbox" in the game dev sense and not in the linux security sense

[hakstuff @hakstuff]

Aaand we have our first major instrument cluster pwn at the @GrrCON Car Hacking Village! The Nissan instrument cluster we brought is now reading 1337mi, performed completely over CAN bus 😆

[hakstuff @hakstuff]

Instrument cluster setups ready for GrrCON's CHV! So far I've got a Ford, Nissan, and Hyundai cluster ready for hacking. Hoping to also set up an Audi cluster if I have time.

[Dulge @dulgex]

IDA Pro larping

[hakstuff @hakstuff]

I don't have any dumps from this unit so in that video I was fuzzing the bus to wake it up/make sure it works. Unfortunately it then got stuck in french 🇫🇷 apparently you can change the cluster language over CAN!

[hakstuff @hakstuff]

going to be bringing some instrument clusters to the Car Hacking Village @ GrrCON this year! Hoping to have a fun hands on space to let people get a taste of CAN bus use and abuse.

[hakstuff @hakstuff]

these make me so happy

[Gruppe @gruppeos]

Firefox chan

[hakstuff @hakstuff]

it's crazy how much twitter compression squashes those pics 😭 but here's the main processor: an ST SPC58, which uses the fancy PowerPC "e200z4" cores/arch. Always a treat running into some PPC stuff in a world where everything is ARM! haha

[hakstuff @hakstuff]

neeeeew teardown! this is the BMW BCP-01 V20 module, the central gateway/body control/immobilizer ECU in modern BMW vehicles, made by Visteon.

[hakstuff @hakstuff]

Here's the rear of the board - mostly power electronics with just a little bit of CAN, LIN, and FlexRay. Blog post hopefully coming soon!

[hakstuff @hakstuff]

@sekurlsa_pw triaging crit vulns = bonus pay at M$, or something? 🤔 so wacky that they call non-RCE stuff RCE repeatedly

[SwiftOnSecurity @SwiftOnSecurity]

AI researcher getting increasingly angry at his AI girlfriend solving math problems: "No, I want you to NAIVELY STROKE me."