Meant, ages ago, to put up links to these. Some interesting work that actually deserves more detail, but… For me, the best presentations of both events were:

- the guys that hacked the RDS-TMC feeds to car GPS systems, showing these systems can be used to reroute traffic at will

- the building access control hack by Zac Franken, which showed that no matter how fancy your new biometric system is, if it relies on an aging clear-text protocol it’s no more secure than the old one

- the car hacking that makes it possible to falsify emissions reports

All seem to me to revolve around the same Blindside issue: how to ensure that the output of a computer system can be trusted. In a physical system, you have to trust the inspector. There are many more failure points in a computer system.

The links:
Black Hat day 1

Black Hat day 2

Defcon day 1

Defcon days 2-3

wg