1. Attachments are working again! Check out this thread for more details and to report any other bugs.

Baby, you can hack my car

Discussion in 'Fred's House of Pancakes' started by Pinto Girl, Oct 17, 2011.

  1. Pinto Girl

    Pinto Girl New Member

    Joined:
    Aug 14, 2006
    3,093
    350
    0
    Location:
    California
    Vehicle:
    Other Non-Hybrid
    Model:
    N/A
    Businessweek, October 17-23

    Researchers demonstrate how easy it is to infiltrate automotive computers and gain control of brakes, steering, engine, lights and door locks.


    Modern automobiles can be infiltrated without going anywhere near them. The Bluetooth connection used in hands free phone systems, telematics like OnStar and SYNC, the keyless entry system and even the tire pressure sensors provide an unsecured entrance to the computers which control the vehicle's basic functions.

    In one test, testers in San Diego hacked a car in Seattle. They remotely unlocked the doors, started the engine, and sent the car's GPS coordinates to another tester, who drove the car away.

    The auto industry hopes to soon design security protocols into automotive computers, but every car built since 1996—and especially those with a controller area network, included on every automobile built since 2008—is vulnerable.
     
    3 people like this.
  2. Trebuchet

    Trebuchet Senior Member

    Joined:
    Dec 21, 2007
    3,772
    936
    43
    Vehicle:
    Other Hybrid
    Great post! Thanks PG.
     
  3. amped

    amped Senior Member

    Joined:
    Apr 15, 2004
    3,892
    694
    0
    Location:
    Columbia River Gorge, Oregon
    Vehicle:
    Other Hybrid
    Model:
    N/A
    Other than the rigged experiment mentioned, I've never heard of any vehicle controls being highjacked electronically. Is this really a solution in search of a problem or a new biz op for entrepreneurial criminals?
     
    1 person likes this.
  4. FL_Prius_Driver

    FL_Prius_Driver Senior Member

    Joined:
    Jun 17, 2007
    4,319
    1,527
    0
    Location:
    Tampa Bay
    Vehicle:
    2010 Prius
    Model:
    I

    It's a warning shot across the bow.
     
  5. JimN

    JimN Let the games begin!

    Joined:
    Nov 26, 2006
    7,028
    1,116
    0
    Location:
    South Jersey
    Vehicle:
    2010 Prius
    Model:
    V
    I couldn't find the article but from Engineers Can Now Wirelessly Hack Your Car | 80beats | Discover Magazine "In the wrong hands, the technology could certainly be harmful; once a hacker gains access, they can do anything from sabotage brakes to monitor car movements (by forcing the car to send GPS signals). But the engineers say the “wrong†hands wouldn’t have the know-how to undertake these complicated procedures—at least for now. As Stefan Savage, a computer scientist at the University of California, San Diego, told Technology Review: “This took 10 researchers two years to accomplish,†Savage adds. “It’s not something that one guy is going to do in his garage.â€"

    If it's so easy why isn't it being used on the street? I suspect the BW article is just fear-mongering.
     
  6. qbee42

    qbee42 My other car is a boat

    Joined:
    Mar 2, 2006
    18,058
    3,073
    7
    Location:
    Northern Michigan
    Vehicle:
    2006 Prius
    It is. Just because you access the Bluetooth connection on a car doesn't mean you can start it. Hacking CAN-bus isn't particularly scary if it requires someone attaching a wire to your car. I can't see that happening while you are driving down the road.

    Most of these fear mongering articles fail to explain the details of computer based systems, leading casual readers to assume that everything is somehow linked in some sort of giant Internet. It isn't.

    Granted, we need to pay more attention to computer security, but as it is cars are fairly secure. Wireless key systems are difficult to hack, and the rest is physically hard to access. I'm not losing any sleep over it.

    Tom
     
  7. KK6PD

    KK6PD _ . _ . / _ _ . _

    Joined:
    Mar 24, 2008
    4,003
    944
    118
    Location:
    Los Angeles Foothills
    Vehicle:
    Other Hybrid
    Model:
    N/A
    That's why Starships and Prii need a Command Code access system for external access into the Main Computer Core. We all know what happened to Kahn when Kirk sent Reliant the proper code "16309"
    ......Drop Shields...... :eek:

    I'm sure Cmdr Doc Willie of the Zhang Heng is all too familier with this concept!
     
  8. fuzzy1

    fuzzy1 Senior Member

    Joined:
    Feb 26, 2009
    17,105
    10,039
    90
    Location:
    Western Washington
    Vehicle:
    Other Hybrid
    Model:
    N/A
    So how do they remotely gain control of brakes and steering?

    This thing isn't organized at all like my Windoze PC.
     
  9. FL_Prius_Driver

    FL_Prius_Driver Senior Member

    Joined:
    Jun 17, 2007
    4,319
    1,527
    0
    Location:
    Tampa Bay
    Vehicle:
    2010 Prius
    Model:
    I

    For the present, your comments are accurate. However, can some poorly engineered controller on future cars have significant security holes? Surely at some point, the financial pressure to have wireless access for remote auto technician servicing and debug will occur. Combine that with the "safety features" of automatic braking for close object proximity and other driver assistance features, it could happen. Even today I was reading where a "nusiance virus" had gotten into the UAV ground control computers of the Air Force. One hurdle down, just a couple more to go. Also, the STUXNET trojan got into the Iranian U235 centrifuges by transversing all kinds of unknown holes. Are car computer operating systems going to be bug free from day one? To me it's more of a question of "when" rather than "if".