DEF CON 33 - Smart Bus Smart Hacking: Free WiFi to Total Control - Kai Ching Wang, Chiao-Lin Yu
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 21:07
Security researcher Stephen Meow accidentally hacked a smart bus system through free Wi-Fi, revealing serious vulnerabilities that could allow control of entire transportation networks 1:25-1:38.
Key Takeaways:
• Smart buses use ADAS for driver safety and APS for connectivity, but these systems had security flaws allowing unauthorized access 3:37-5:25.
• By connecting to free Wi-Fi, the researcher accessed the M2M router with default credentials and CVE vulnerabilities 7:17-9:01.
• The hack provided access to live GPS data, camera feeds, and the central control system with no encryption 10:16-11:02.
• Critical vulnerabilities included command injection, weak admin passwords, unencrypted HTTP traffic, and no network isolation 12:01-20:20.
Transportation security requires proper encryption, secure vendor selection, and network segregation to prevent similar breaches 20:24-20:53.
Sources:
- 1:25-1:38 Accidental hacking through bus Wi-Fi
- 3:37-5:25 Smart bus systems and vulnerabilities
- 7:17-9:01 Router access and security flaws
- 10:16-11:02 System access and data exposure
- 12:01-20:20 Complete vulnerability analysis
- 20:24-20:53 Security recommendations
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello everyone. So let's welcome our next talk speaker Stephen or it's me. And today I will talk about the self-driving cars. I will not talk about the self-driving cars. Instead I want to talk about the smart bus. This bus are still driven by people but they have a new safety technology to help the driver. Today I will tell you what happened when I take a long bus ride. And don't worry, nothing accident happened because I don't want to die from a live demo. Okay, we all know that the long trip can be boring. But then I saw something great, a sign that say a free Wi-Fi available. Honestly, if I see when I see a Wi-Fi sign, I'm probably already connect before I even finish reading it. But have you ever wonder what is behind the free Wi-Fi? We just want to watch video to check the email or t…