Smart Bus Smart Hacking - Free WiFi to Total Control

Explore the critical security vulnerabilities in smart public transportation systems through this DEF CON 33 conference talk. Discover how researchers uncovered over 10 different vulnerabilities in real-world smart buses by starting with simple free WiFi access and escalating to complete system control. Learn the attack progression from connecting to bus-provided WiFi networks to hacking vehicular routers, accessing private bus networks, and ultimately manipulating communication between Advanced Driver Assistance Systems (ADAS) and Advanced Public Transportation Services (APTS). Understand how attackers can control onboard LED displays, steal driver and passenger information, acquire operational bus data, and penetrate backend API servers of transportation companies. Examine severe vulnerabilities and backdoors found in cybersecurity-certified vehicular routers and monitoring equipment that could potentially compromise all global units of the same model. Gain insights into attack vectors originating from open WiFi networks, security design flaws in connected public transport vehicles, and systemic issues from regulatory and specification-setting perspectives that affect the entire smart transportation ecosystem.