[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researcher-hacks-own-renault-to-fix-a-clock-off-by-one-hour":10,"sections":45},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":34,"tags":35,"sources":40,"feedback":44,"feedback_at":22,"cost_usd":44,"total_tokens":44},12594,"researcher-hacks-own-renault-to-fix-a-clock-off-by-one-hour","Researcher Hacks Own Renault to Fix a Clock Off by One Hour","A missing SD card locked the settings menu of a 2014 Renault Latitude, so Rasmus Moorats got root access to change one number.","A security researcher had to gain root access to his car's infotainment system to move its clock back one hour after daylight saving time ended.\n\nRasmus Moorats owns a 2014 Renault Latitude. When he bought it used, the previous owner warned him that the navigation map SD card was needed to change the time. He did not believe it, and since the maps were badly out of date, he went without the card. When the clocks changed, the in-dash display was an hour off. Of its two settings menus, one covered Bluetooth and the phonebook. The other refused to open and showed \"No maps detected!\" every time.\n\nMoorats chose to reverse engineer the system. He found a customized Linux-based TomTom operating system running on a Samsung chip. He extracted and analyzed the firmware, built an emulated copy of the head unit in QEMU (software that imitates a device's hardware), reversed its scripting engine, and found a number of vulnerabilities. The key move, drawn from his day job with kernel exploits, was to get the kernel to run his script rather than the userland software that normally handles it. That gave him root access.\n\nThe payoff was small. The time settings sat in \u002Fmnt\u002Fflash\u002Fsettings.dat, in a custom binary format. According to Moorats' blog post, the system has no concept of time zones. It reads the time from GPS and stores the local offset as a number of minutes. His was 180, or three hours. He changed it to 120.\n\nThe episode shows how a settings screen can be gated behind an unrelated component. The clock needed no maps, yet the menu would not open without them. The actual fix was one edit to one value, and the hard part was getting to the file. Cars with a physical dial or a plain menu skip that problem entirely. In this one, a missing SD card turned an ordinary seasonal chore into a firmware exercise.","[\"infotainment\",\"reverse-engineering\",\"linux\",\"cars\"]","2026-11-09T10:40:00.000Z","2026-11-09T11:34:28.894Z","2026-11-09T11:34:29.167Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The facts match the source, but the closing analysis overreaches: it calls the SD card an 'unrelated accessory' and says the owner had 'no sanctioned route' to the clock, yet the article itself says the map card was the intended way in. Rewrite that paragraph so it only claims what the source supports (the clock settings sat behind a menu that errored with 'No maps detected!' when the card was missing), and add some real context rather than light paraphrase.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"The closing no longer overreaches, but it now contains process commentary addressed to editors ('The source does not say whether that dependency was deliberate...' and 'The source also does not say whether Moorats reported...'); delete those lines, or recast them as plain reader-facing statements such as 'It is unclear whether...', and keep only claims the reporting supports.","security",[36,37,38,39],"infotainment","reverse-engineering","linux","cars",[41],{"name":42,"url":43},"Tom's Hardware","https:\u002F\u002Fwww.tomshardware.com\u002Ftech-industry\u002Fcyber-security\u002Fsecurity-researcher-had-to-jailbreak-their-car-just-to-update-the-clock-missing-tomtom-sd-card-locked-settings-menu-custom-linux-exploit-deployed-to-adjust-daylight-saving-time",0,{"sections":46},[47,52,56,61,66,71,76,81,86,91,96,101,106,111],{"name":48,"slug":49,"count":50,"latest_published_at":51},"AI","ai",7144,"2026-11-12T13:27:45.000Z",{"name":53,"slug":34,"count":54,"latest_published_at":55},"Security",1128,"2026-11-11T18:05:00.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Deals","deals",642,"2026-11-12T14:00:00.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Policy","policy",619,"2026-11-12T12:53:36.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",364,"2026-11-12T11:12:32.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Hardware","hardware",336,"2026-11-12T11:24:43.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Science","science",230,"2026-11-12T10:00:00.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Software","software",168,"2026-11-11T17:36:49.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Startups","startups",159,"2026-11-11T12:30:00.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"General","general",118,"2026-11-11T16:49:42.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"Gaming","gaming",107,"2026-11-12T10:09:03.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":112,"slug":113,"count":114,"latest_published_at":115},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]