General Discussion
Related: Editorials & Other Articles, Issue Forums, Alliance Forums, Region ForumsHackers Cut a Corvette’s Brakes Via a Common Car Gadget
Hackers Cut a Corvettes Brakes Via a Common Car Gadget
Author: Andy Greenberg. Andy Greenberg Security
Date of Publication: 08.11.15. Time of Publication: 7:00 am.
Car hacking demos like last months over-the-internet hijacking of a Jeep have shown its possible for digital attackers to cross the gap between a cars cellular-connected infotainment system and its steering and brakes. But a new piece of research suggests there may be an even easier way for hackers to wirelessly access those critical driving functions: Through an entire industry of potentially insecure, internet-enabled gadgets plugged directly into cars most sensitive guts.
At the Usenix security conference today, a group of researchers from the University of California at San Diego plan to reveal a technique they could have used to wirelessly hack into any of thousands of vehicles through a tiny commercial device: A 2-inch-square gadget thats designed to be plugged into cars and trucks dashboards and used by insurance firms and trucking fleets to monitor vehicles location, speed and efficiency. By sending carefully crafted SMS messages to one of those cheap dongles connected to the dashboard of a Corvette, the researchers were able to transmit commands to the cars CAN busthe internal network that controls its physical driving componentsturning on the Corvettes windshield wipers and even enabling or disabling its brakes.
We acquired some of these things, reverse engineered them, and along the way found that they had a whole bunch of security deficiencies, says Stefan Savage, the University of California at San Diego computer security professor who led the project. The result, he says, is that the dongles provide multiple ways to remotely
control just about anything on the vehicle they were connected to.
In the video below, the researchers demonstrate their proof-of-concept attacks on a 2013 Corvette, messing with its windshield wipers and both activating and cutting its brakes. Though the researchers say their Corvette brake tricks only worked at low speeds due to limitations in the automated computer functions of the vehicle, they say they could have easily adapted their attack for practically any other modern vehicle and hijacked other critical components like locks, steering or transmission, too.
More:
http://www.wired.com/2015/08/hackers-cut-corvettes-brakes-via-common-car-gadget/
NutmegYankee
(16,200 posts)There are 2 things that are purely mechanical - The clutch and the parking brake.
NutmegYankee
(16,200 posts)Rex
(65,616 posts)Yep...can't wait for the day my car can drive me to the store, then wrecks because some kids on 4chan are bored. Yep yep.
Erose999
(5,624 posts)Ford Motor Company to tell me I'm when low on oil or coolant. I can check my car's fluids myself thank you very much. Nor do I need fancy navigation software, I have the sense to print a map beforehand. If you depend on your car to do all these things for you, that trust is ripe to be exploited.