An innocent-looking portable speaker can hide a hacking device that launches CAN injection attacks, which have been used to steal cars.