1. Attachments are working again! Check out this thread for more details and to report any other bugs.

Prime hackable from the Internet?

Discussion in 'Prime Main Forum (2017-2022)' started by stevepea, Jun 28, 2017.

  1. stevepea

    stevepea Senior Member

    Joined:
    Apr 16, 2017
    531
    578
    0
    Location:
    California
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Plus
    I'm sure a lot of you heard the reports over the last couple years, of an unaltered car (Jeep Grand Cherokee being just one) being successfully hacked remotely via the internet -- not only to control the entertainment systems, but the driving systems as well.
    Here's a WIRED article: Hackers Remotely Kill a Jeep on the Highway—With Me in It | WIRED
    Here's a YouTube of them doing it successfully:


    (This resulted in Fiat/Chrysler having to recall their cars to upgrade the security).

    But I was wondering... with a car such as the Prime where there's so many electronic controls, is there any part of the car that could be vulnerable to hacking remotely? Is the car in any way connected to the Internet? One would think not --- but then.. one would think not for a Jeep Grand Cherokee too, right? But hackers found a way to hack in using the internet, being miles away. So I'm wondering... security precautions aside, how different or similar the Prime really is, from the Jeep Grand Cherokee in this regard?
     
    #1 stevepea, Jun 28, 2017
    HPrimeAdvanced likes this.
  2. JimboPalmer

    JimboPalmer Tsar of all the Rushers

    Joined:
    Apr 14, 2009
    12,470
    6,862
    2
    Location:
    Greenwood MS USA
    Vehicle:
    2012 Prius v wagon
    Model:
    Three
    Entune uses your phone as an intermediary. One would have to hack the phone app, then use the hacked phone app to attack the infotainment system. Done well, there is no connection between the infotainment system and the car controls. If I was suspicious I would look at the CAN bus.

    Jeep used the same system for operation and infotainment. In the Prius, as the Wired article mentions, you need physical access to the OBDII connector under the dash. Entune uses Bluetooth from your phone to the car, it has a typical range of 10 feet. only your phone is doing Wifi or SMS. Only take phone updates from Toyota.

    CAN bus - Wikipedia
     
    #2 JimboPalmer, Jun 28, 2017
    Last edited: Jun 28, 2017
    HPrimeAdvanced, stevepea and joachimz like this.
  3. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    107,699
    48,946
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    i think it can be done, but i wouldn't worry about it until it starts happening. of course, the mfgs will come up with something to stop it.
     
    #3 bisco, Jun 28, 2017
    HPrimeAdvanced likes this.
  4. Captmiddy

    Captmiddy Active Member

    Joined:
    Dec 15, 2016
    225
    204
    1
    Location:
    Massachusetts
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Advanced
    Actually on the Advanced there is a cellular connection. It is used for the safety connect and for other features. This means there is a path into the system, but it is fairly likely that they have done some work to protect the endpoints over what was talked about in this report. I think that there are other limitations in the Toyota system over the Jeep system. The Toyota system is capable of adjusting temp, charging and other basic functions but some functions are disabled if the car is running. You can't adjust climate if the car is running, you can't get charging details if the car is running. This means that while your friend may be able to turn up the climate control remotely on your parked car so that when you get in in the summer it is 110F inside your car instead of a more reasonable temp, it is not really dangerous.

    Other than vehicle tracking, it is not clear what features the Safety Connect system offers the remote operator. Can they turn off the vehicle forcing it off the road? Can they force on the brake? Some of these features are added to newer vehicles as theft protection, and the trade off is that means they are exposed in some way to an open network.
     
    #4 Captmiddy, Jun 29, 2017
    HPrimeAdvanced and stevepea like this.
  5. mdhare

    mdhare Member

    Joined:
    Feb 7, 2017
    58
    33
    0
    Location:
    Madison, WI
    Vehicle:
    2017 Prius Prime
    Model:
    Prime Premium
    Hmm, the prime advanced does have an lte modem in it... :)

    Disclaimer: baseless speculation. My premium hasn't rebooted, have had it since Feb

    Edit: oops, sorry, meant to put this in the most recent rebooting radio thread
     
    #5 mdhare, Jun 30, 2017
(You must log in or sign up to post here.)