Home and Auto Your New Car Is Hackable

**Bowser** · 07-24-2015, 08:30 AM

Andy Greenberg was driving his car in St. Louis when he lost control of his vehicle. The air conditioning, the radio and windshield wipers all suddenly turned on, then the engine cut off. Greenberg tried to take back control of the car, but he couldn’t. It had been hacked.

Yes, you can now add cars to the ever increasing list of things that can be hacked. Greenberg is a senior writer for Wired and he had asked two security researchers – Charlie Miller and Chris Valasek – to show him how vulnerable cars are to remote hacking. So, they did just that. The tricks were at first small: The hackers sent a picture to his dashboard's digital display. Soon after, they cut his brakes. No wonder the experiment had quickly “ceased to be fun” for Greenberg. The car eventually ended up in a ditch.

The hacking technique is described as “a zero-day exploit.” Security experts were able to target the Jeep Cherokee that Greenberg was driving and get wireless control of the vehicle – all from the comfort of their own home. Miller and Valasek were able to hack the car through its Uconnect infotainment system and run their own code. And herein lies the problem with Internet-connected entertainment systems like Uconnect, which are installed on dashboards to improve usability and entertainment.

Experiments like these raise security questions on the newer generation of cars that are increasingly connected to the Internet. Even the hackers were surprised by their own ability to remotely control these cars.

“When I saw we could do it anywhere, over the Internet, I freaked out,” Valasek told Wired.

Cyber security experts are now urging owners of Fiat Chrysler cars to update their systems. “There are hundreds of thousands of cars that are vulnerable on the road right now,” Miller told Reuters.

Fiat Chrysler have issued an update to fix the most serious security issues highlighted by Miller and Valasek. “Similar to a smartphone or tablet, vehicle software can require updates for improved security protection to reduce the potential risk of unauthorized and unlawful access to vehicle systems,” the company said, according to Reuters.

Miller and Valasek suggest 471,000 vehicles are vulnerable to a similar attack. The security researchers will present their paper at the Def Con security conference next month. Miller and Valasek hope these experiments will pressure manufacturers to become aware and respond quickly to these security vulnerabilities.

http://www.iflscience.com/technology...d-took-control

So I suppose it would be a good thing to get the Malware Bytes/Avast package along with the undercoating and floor mats, now.

**Donger** · 07-24-2015, 08:32 AM

So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?

**Bowser** · 07-24-2015, 08:35 AM

Quote:

Originally Posted by Donger

So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?

Apparently, and I would assume. I know nothing of the Uconnect system or how they operate. I'll have to research it up to get the facts of it...

http://www.driveuconnect.com/

**ptlyon** · 07-24-2015, 08:45 AM

3 words - Peyton Manning's Buick

**Bugeater** · 07-24-2015, 08:51 AM

This is why I drive a 1910 Hupmobile.

**BigMeatballDave** · 07-24-2015, 08:57 AM

Chevy is really pushing their 4g LTE option in their models.

Other than satellite/On Star, I don't know of any other way it could be hacked.

**BigMeatballDave** · 07-24-2015, 08:58 AM

A friend has a 2014 Malibu. He has a phone number for his car.

**ptlyon** · 07-24-2015, 09:01 AM

Quote:

Originally Posted by BigMeatballDave

Chevy is really pushing their 4g LTE option in their models.

Other than satellite/On Star, I don't know of any other way it could be hacked.

My 2014 Silverado has that option. When first told about it, I thought "cool". My next thought was "how is it secured?".

DaveNull · 07-24-2015, 09:01 AM

Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.

**Lzen** · 07-24-2015, 09:03 AM

Quote:

Originally Posted by ptlyon

3 words - Peyton Manning's Buick

**ptlyon** · 07-24-2015, 09:05 AM

Quote:

Originally Posted by BigMeatballDave

A friend has a 2014 Malibu. He has a phone number for his car.

All Chevy's come with one that has On Star

**MahiMike** · 07-24-2015, 09:13 AM

Damn computers. Terminators are right around the corner.

kepp · 07-24-2015, 09:31 AM

Quote:

Originally Posted by ptlyon

3 words - Peyton Manning's Buick

Garcia Bronco · 07-24-2015, 09:37 AM

It's a wi-fi chip in your GM car, regardless of whether you pay for the service or not(onstar) it is an access point to your vehicles computer system. That's just the connection. The chip they pwn to upload the firmware is different chip. So don't think you need to go get your onstar turned off.

It used to be that you had to be in proximty to perform this task, but that is no longer the case.

Garcia Bronco · 07-24-2015, 09:40 AM

Quote:

Originally Posted by DaveNull

Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.

No. It wasn't based on our discussions at work, but I am not sure. But Onstar or not..it's the chips themselves. The OnStar connection isn't being used or being piggybacked on to perform the hacking. Think of it more as OnStar accesses your systems through the same connection.

07-24-2015, 08:30 AM
Bowser sorta mod-ish Join Date: Jan 2004 Location: KC North Casino cash: $3421616	Your New Car Is Hackable Andy Greenberg was driving his car in St. Louis when he lost control of his vehicle. The air conditioning, the radio and windshield wipers all suddenly turned on, then the engine cut off. Greenberg tried to take back control of the car, but he couldn’t. It had been hacked. Yes, you can now add cars to the ever increasing list of things that can be hacked. Greenberg is a senior writer for Wired and he had asked two security researchers – Charlie Miller and Chris Valasek – to show him how vulnerable cars are to remote hacking. So, they did just that. The tricks were at first small: The hackers sent a picture to his dashboard's digital display. Soon after, they cut his brakes. No wonder the experiment had quickly “ceased to be fun” for Greenberg. The car eventually ended up in a ditch. The hacking technique is described as “a zero-day exploit.” Security experts were able to target the Jeep Cherokee that Greenberg was driving and get wireless control of the vehicle – all from the comfort of their own home. Miller and Valasek were able to hack the car through its Uconnect infotainment system and run their own code. And herein lies the problem with Internet-connected entertainment systems like Uconnect, which are installed on dashboards to improve usability and entertainment. Experiments like these raise security questions on the newer generation of cars that are increasingly connected to the Internet. Even the hackers were surprised by their own ability to remotely control these cars. “When I saw we could do it anywhere, over the Internet, I freaked out,” Valasek told Wired. Cyber security experts are now urging owners of Fiat Chrysler cars to update their systems. “There are hundreds of thousands of cars that are vulnerable on the road right now,” Miller told Reuters. Fiat Chrysler have issued an update to fix the most serious security issues highlighted by Miller and Valasek. “Similar to a smartphone or tablet, vehicle software can require updates for improved security protection to reduce the potential risk of unauthorized and unlawful access to vehicle systems,” the company said, according to Reuters. Miller and Valasek suggest 471,000 vehicles are vulnerable to a similar attack. The security researchers will present their paper at the Def Con security conference next month. Miller and Valasek hope these experiments will pressure manufacturers to become aware and respond quickly to these security vulnerabilities. http://www.iflscience.com/technology...d-took-control So I suppose it would be a good thing to get the Malware Bytes/Avast package along with the undercoating and floor mats, now.
Posts: 100,692

07-24-2015, 08:32 AM	#2
Donger "Think BOOM!" Join Date: Nov 2003 Location: 33.675° N 106.475° W Casino cash: $10329900 VARSITY	So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection? __________________ I think the young people enjoy it when I "get down," verbally, don't you?
Posts: 180,739

07-24-2015, 08:45 AM	#4
ptlyon Bono & Grbac wasn't enough Join Date: Oct 2000 Location: Sioux City, IA Casino cash: $13083829	3 words - Peyton Manning's Buick __________________ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Advertise here: $19.99 a month
Posts: 33,570

07-24-2015, 08:51 AM	#5
Bugeater The Maintenance Guy Join Date: Sep 2005 Location: Renovated Bugeater Estate Casino cash: $6252680	This is why I drive a 1910 Hupmobile.
Posts: 70,443

07-24-2015, 08:57 AM	#6
BigMeatballDave GBM 8-12-15 Join Date: Aug 2000 Location: Dayton, Oh. Casino cash: $10052154	Chevy is really pushing their 4g LTE option in their models. Other than satellite/On Star, I don't know of any other way it could be hacked.
Posts: 59,997

07-24-2015, 08:58 AM	#7
BigMeatballDave GBM 8-12-15 Join Date: Aug 2000 Location: Dayton, Oh. Casino cash: $10052154	A friend has a 2014 Malibu. He has a phone number for his car.
Posts: 59,997

07-24-2015, 09:01 AM	#9
DaveNull Veteran Join Date: Nov 2011 Location: Villa Straylight Casino cash: $10005610	Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.
Posts: 2,367

07-24-2015, 09:13 AM	#12
MahiMike He's Mahomie! Join Date: Aug 2001 Location: Jax, FL Casino cash: $10023443	Damn computers. Terminators are right around the corner. __________________ 99.9%
Posts: 17,387

07-24-2015, 09:37 AM	#14
Garcia Bronco No Keys, No Problem Join Date: Sep 2000 Location: Denver Casino cash: $5263136	It's a wi-fi chip in your GM car, regardless of whether you pay for the service or not(onstar) it is an access point to your vehicles computer system. That's just the connection. The chip they pwn to upload the firmware is different chip. So don't think you need to go get your onstar turned off. It used to be that you had to be in proximty to perform this task, but that is no longer the case.
Posts: 30,851