A security researcher has revealed how they were forced to update the time on their car infotainment system using reverse engineering techniques. Of course, invasive tech surgery shouldn’t be needed for this kind of basic routine daylight saving time tweaking task. However, Rasmus Moorats’ 2014 Renault Latitude wouldn’t allow him to adjust the time because the original navigation map SD card was missing.

Moorats had been warned. When he bought the used car, the previous owner noted that the SD card would be required to change the time on the in-car display. “I didn't really find that believable,” recalls the security researcher. They seem to have believed it was a skill issue of the prior owner and, because the maps it contained were chronically out of date, they decided to confidently decide they didn’t need the SD card...

The time to adjust non-connected clocks to daylight saving time inevitably came, and Moorats decided to adjust the in-car time display, which had become an hour out of sync. Two settings menus were available via the in-dash system. One allowed the adjustment of Bluetooth and Phonebook settings – clearly no use here. But the second settings menu wouldn’t produce any submenu. Instead, an error message "No maps detected!" popped up every time it was prodded.

With a certain set of skills under his belt, Moorats decided to “just RE it,” where RE = reverse engineer . He found out that the head unit ran a customized Linux-based TomTom operating system on a Samsung SoC.

Source link