Uncovering the Secrets of Tire Pressure Monitoring Systems

Explore the security vulnerabilities of direct Tire Pressure Monitoring Systems (TPMS) in this 26-minute conference talk from DEF CON 33. Delve deep into how these systems, widely used in modern vehicles, transmit tire information wirelessly without encryption or authentication protocols. Learn how attackers can capture TPMS signals using inexpensive hardware to establish vehicle tracking infrastructure, potentially compromising driver privacy and security. Discover the development and demonstration of custom tools capable of creating spoofed TPMS messages that can deceive vehicle Electronic Control Units (ECUs) across different car manufacturers. Gain insights into the practical implications of these vulnerabilities and understand how seemingly innocuous automotive systems can become attack vectors for malicious actors seeking to track or manipulate vehicle data.