6 ms·

I'm not familiar with DSD/mbelib but based on what I saw with a quick web search this sounds like a really interesting attack vector. I do want to perform some

I'm not familiar with DSD/mbelib but based on what I saw with a quick web search this sounds like a really interesting attack vector. I do want to perform some more research in this area, so thanks for the idea.

jcims 4y ago
Be sure to look at both the control channel and voice codecs. It's been a minute but IIRC there are a few open source implementations for both. Finding a bug in RDS would be pretty funny - https://en.wikipedia.org/wiki/Radio_Data_System https://en.wikipedia.org/wiki/Radio_Data_System
- thereddaikon 4y ago
  There was an unintentional one earlier this year. Seattle's local NPR station bricked some Mazda infotainment sets by sending malformed data. https://arstechnica.com/cars/2022/02/radio-station-snafu-in-seattle-bricks-some-mazda-infotainment-systems/ https://arstechnica.com/cars/2022/02/radio-station-snafu-in-...
  - ugjka 4y ago
    That wasn't RDS but HD radio's data stream
- Gordonjcp 4y ago
  I can't find it now, but in the olden days of the Internet I read an article about how an up-and-coming band had "hacked" RDS to switch radios to play their song when it was played out on the local station. The local station had a UHF link from the studio to the TX site that was audio only, a very common setup in the mid-90s, and the RDS flag on the transmitter was switched "in band" by sending a burst of tones over the audio feed, right at the start of the traffic jingle. Slap the traffic announce jingle cart in, hit the button, tune starts with just three quick DTMF digits. Uh-huh, you're seeing where this is going, right? So if you put those three DTMF digits at the start of your single... :-D
  - rickostuff 4y ago
    I'm going to have to see what I can find about this incident. Sounds like the early days of phone phreaking. Awesome!
  - jcims 4y ago
    I know this isn’t a substantive reply to your content but that’s amazing! I love it.

jcims 4y ago

Be sure to look at both the control channel and voice codecs. It's been a minute but IIRC there are a few open source implementations for both. Finding a bug in RDS would be pretty funny - https://en.wikipedia.org/wiki/Radio_Data_System https://en.wikipedia.org/wiki/Radio_Data_System

thereddaikon 4y ago
There was an unintentional one earlier this year. Seattle's local NPR station bricked some Mazda infotainment sets by sending malformed data. https://arstechnica.com/cars/2022/02/radio-station-snafu-in-seattle-bricks-some-mazda-infotainment-systems/ https://arstechnica.com/cars/2022/02/radio-station-snafu-in-...
- ugjka 4y ago
  That wasn't RDS but HD radio's data stream
Gordonjcp 4y ago
I can't find it now, but in the olden days of the Internet I read an article about how an up-and-coming band had "hacked" RDS to switch radios to play their song when it was played out on the local station. The local station had a UHF link from the studio to the TX site that was audio only, a very common setup in the mid-90s, and the RDS flag on the transmitter was switched "in band" by sending a burst of tones over the audio feed, right at the start of the traffic jingle. Slap the traffic announce jingle cart in, hit the button, tune starts with just three quick DTMF digits. Uh-huh, you're seeing where this is going, right? So if you put those three DTMF digits at the start of your single... :-D
- rickostuff 4y ago
  I'm going to have to see what I can find about this incident. Sounds like the early days of phone phreaking. Awesome!
- jcims 4y ago
  I know this isn’t a substantive reply to your content but that’s amazing! I love it.