|
07-24-2015, 08:30 AM | |
sorta mod-ish
Join Date: Jan 2004
Location: KC North
Casino cash: $2141616
|
Your New Car Is Hackable
Andy Greenberg was driving his car in St. Louis when he lost control of his vehicle. The air conditioning, the radio and windshield wipers all suddenly turned on, then the engine cut off. Greenberg tried to take back control of the car, but he couldn’t. It had been hacked.
Yes, you can now add cars to the ever increasing list of things that can be hacked. Greenberg is a senior writer for Wired and he had asked two security researchers – Charlie Miller and Chris Valasek – to show him how vulnerable cars are to remote hacking. So, they did just that. The tricks were at first small: The hackers sent a picture to his dashboard's digital display. Soon after, they cut his brakes. No wonder the experiment had quickly “ceased to be fun” for Greenberg. The car eventually ended up in a ditch. The hacking technique is described as “a zero-day exploit.” Security experts were able to target the Jeep Cherokee that Greenberg was driving and get wireless control of the vehicle – all from the comfort of their own home. Miller and Valasek were able to hack the car through its Uconnect infotainment system and run their own code. And herein lies the problem with Internet-connected entertainment systems like Uconnect, which are installed on dashboards to improve usability and entertainment. Experiments like these raise security questions on the newer generation of cars that are increasingly connected to the Internet. Even the hackers were surprised by their own ability to remotely control these cars. “When I saw we could do it anywhere, over the Internet, I freaked out,” Valasek told Wired. Cyber security experts are now urging owners of Fiat Chrysler cars to update their systems. “There are hundreds of thousands of cars that are vulnerable on the road right now,” Miller told Reuters. Fiat Chrysler have issued an update to fix the most serious security issues highlighted by Miller and Valasek. “Similar to a smartphone or tablet, vehicle software can require updates for improved security protection to reduce the potential risk of unauthorized and unlawful access to vehicle systems,” the company said, according to Reuters. Miller and Valasek suggest 471,000 vehicles are vulnerable to a similar attack. The security researchers will present their paper at the Def Con security conference next month. Miller and Valasek hope these experiments will pressure manufacturers to become aware and respond quickly to these security vulnerabilities. http://www.iflscience.com/technology...d-took-control So I suppose it would be a good thing to get the Malware Bytes/Avast package along with the undercoating and floor mats, now. |
Posts: 103,060
|
07-24-2015, 08:32 AM | #2 |
"Think BOOM!"
Join Date: Nov 2003
Location: 33.675° N 106.475° W
Casino cash: $8999900
VARSITY
|
So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?
__________________
I think the young people enjoy it when I "get down," verbally, don't you? |
Posts: 185,757
|
07-24-2015, 08:35 AM | #3 | |
sorta mod-ish
Join Date: Jan 2004
Location: KC North
Casino cash: $2141616
|
Quote:
http://www.driveuconnect.com/ |
|
Posts: 103,060
|
07-24-2015, 08:45 AM | #4 |
Bono & Grbac wasn't enough
Join Date: Oct 2000
Location: Sioux City, IA
Casino cash: $11653829
|
3 words - Peyton Manning's Buick
__________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Advertise here: $19.99 a month |
Posts: 36,296
|
07-24-2015, 08:51 AM | #5 |
The Maintenance Guy
Join Date: Sep 2005
Location: Renovated Bugeater Estate
Casino cash: $4042680
|
This is why I drive a 1910 Hupmobile.
|
Posts: 70,535
|
07-24-2015, 08:57 AM | #6 |
GBM 8-12-15
Join Date: Aug 2000
Location: Dayton, Oh.
Casino cash: $10052154
|
Chevy is really pushing their 4g LTE option in their models.
Other than satellite/On Star, I don't know of any other way it could be hacked. |
Posts: 59,997
|
07-24-2015, 08:58 AM | #7 |
GBM 8-12-15
Join Date: Aug 2000
Location: Dayton, Oh.
Casino cash: $10052154
|
A friend has a 2014 Malibu. He has a phone number for his car.
|
Posts: 59,997
|
07-24-2015, 09:01 AM | #8 |
Bono & Grbac wasn't enough
Join Date: Oct 2000
Location: Sioux City, IA
Casino cash: $11653829
|
My 2014 Silverado has that option. When first told about it, I thought "cool". My next thought was "how is it secured?".
__________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Advertise here: $19.99 a month |
Posts: 36,296
|
07-24-2015, 09:01 AM | #9 |
Veteran
Join Date: Nov 2011
Location: Villa Straylight
Casino cash: $9995610
|
Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.
|
Posts: 2,367
|
07-24-2015, 09:03 AM | #10 |
Banded
Join Date: Feb 2001
Location: Oz
Casino cash: $1180692
|
__________________
Conversation would be vastly improved by the constant use of four simple words: I do not know. |
Posts: 41,817
|
07-24-2015, 09:05 AM | #11 |
Bono & Grbac wasn't enough
Join Date: Oct 2000
Location: Sioux City, IA
Casino cash: $11653829
|
All Chevy's come with one that has On Star
__________________
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Advertise here: $19.99 a month |
Posts: 36,296
|
07-24-2015, 09:13 AM | #12 |
He's Mahomie!
Join Date: Aug 2001
Location: Jax, FL
Casino cash: $10023443
|
Damn computers. Terminators are right around the corner.
__________________
99.9% |
Posts: 17,387
|
07-24-2015, 09:31 AM | #13 |
MVP
Join Date: Aug 2005
Casino cash: $4629212
|
|
Posts: 14,593
|
07-24-2015, 09:37 AM | #14 |
No Keys, No Problem
Join Date: Sep 2000
Location: Denver
Casino cash: $3943136
|
It's a wi-fi chip in your GM car, regardless of whether you pay for the service or not(onstar) it is an access point to your vehicles computer system. That's just the connection. The chip they pwn to upload the firmware is different chip. So don't think you need to go get your onstar turned off.
It used to be that you had to be in proximty to perform this task, but that is no longer the case. |
Posts: 31,542
|
07-24-2015, 09:40 AM | #15 |
No Keys, No Problem
Join Date: Sep 2000
Location: Denver
Casino cash: $3943136
|
No. It wasn't based on our discussions at work, but I am not sure. But Onstar or not..it's the chips themselves. The OnStar connection isn't being used or being piggybacked on to perform the hacking. Think of it more as OnStar accesses your systems through the same connection.
|
Posts: 31,542
|
|
|