DCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, Smriti
Source: YouTube · DEFCONConference · published Sep 30, 2026 · 39:23
Camel and Smriti present on RFID technology in vehicles, showing how even strong encryption can be bypassed via relay attacks 0:31-0:45.
Key Takeaways:
• RFID cards work without batteries—reader antennas induce current in the tag's coil via Faraday's law 8:02
• Low-frequency (125 kHz) cards have longer range but only send a serial number with no security, making them trivially clonable with tools like Proxmark; high-frequency cards add encryption but shorter range 10:17
• Relay attacks don't crack encryption—attackers amplify and relay the key's signal to trick the car into unlocking and starting 16:36
• Case studies include a Tesla Model 3 relay attack and a CAN frame buffer overflow that bricked the key-reader ECU, locking owners out 29:17
• Japan's ETC toll system (DSRC) is an under-researched attack surface; the speakers invite collaboration via Car Hacking Village 18:22
RFID is both an entry point and a target in vehicles, and the speakers encourage further research through the Car Hacking Village community 35:16.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I'm going to go ahead and officially introduce uh Camel and Seriti and they are going to talk about uh ARID access control for cars which I'm sure should be exciting. So a big round of applause for the two of them. >> Okay. Uh this is a new experience for me. I I talk a lot in a lot of different places, but I've never done like a silent stage here. So, if I'm too loud or like too low, like just like give me like a like a up or a down thing to give me, you know, give me an idea of of what I need to be doing better. Um, so yeah, today uh my friend and I, uh, my friend Sabriniti and I, we're going to be talking about RFID technology in cars, uh, and kind of the different, you know, maybe not so unique applications of it, but take a look at how it's been attacked in vehicles systems specifical…