Your New Car Is Hackable

[Bowser]

Andy Greenberg was driving his car in St. Louis when he lost control of his vehicle. The air conditioning, the radio and windshield wipers all suddenly turned on, then the engine cut off. Greenberg tried to take back control of the car, but he couldn’t. It had been hacked.

Yes, you can now add cars to the ever increasing list of things that can be hacked. Greenberg is a senior writer for Wired and he had asked two security researchers – Charlie Miller and Chris Valasek – to show him how vulnerable cars are to remote hacking. So, they did just that. The tricks were at first small: The hackers sent a picture to his dashboard's digital display. Soon after, they cut his brakes. No wonder the experiment had quickly “ceased to be fun” for Greenberg. The car eventually ended up in a ditch.

The hacking technique is described as “a zero-day exploit.” Security experts were able to target the Jeep Cherokee that Greenberg was driving and get wireless control of the vehicle – all from the comfort of their own home. Miller and Valasek were able to hack the car through its Uconnect infotainment system and run their own code. And herein lies the problem with Internet-connected entertainment systems like Uconnect, which are installed on dashboards to improve usability and entertainment.

Experiments like these raise security questions on the newer generation of cars that are increasingly connected to the Internet. Even the hackers were surprised by their own ability to remotely control these cars.

“When I saw we could do it anywhere, over the Internet, I freaked out,” Valasek told Wired.

Cyber security experts are now urging owners of Fiat Chrysler cars to update their systems. “There are hundreds of thousands of cars that are vulnerable on the road right now,” Miller told Reuters.

Fiat Chrysler have issued an update to fix the most serious security issues highlighted by Miller and Valasek. “Similar to a smartphone or tablet, vehicle software can require updates for improved security protection to reduce the potential risk of unauthorized and unlawful access to vehicle systems,” the company said, according to Reuters.

Miller and Valasek suggest 471,000 vehicles are vulnerable to a similar attack. The security researchers will present their paper at the Def Con security conference next month. Miller and Valasek hope these experiments will pressure manufacturers to become aware and respond quickly to these security vulnerabilities.

http://www.iflscience.com/technology...d-took-control


So I suppose it would be a good thing to get the Malware Bytes/Avast package along with the undercoating and floor mats, now.

[Donger]

So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?

[Bowser]

Originally Posted by Donger

So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?

Apparently, and I would assume. I know nothing of the Uconnect system or how they operate. I'll have to research it up to get the facts of it...

http://www.driveuconnect.com/

[BigRedChief]

Originally Posted by Donger

So they are gaining access via a cellular connection and modem in the vehicles? Do the owners pay for this connection?

It's called U Connect. It allows us to remote start, unlock doors etc. from any internet connection. It also allows for a Moving Wi-Fi hotspot.

It's a trial basis on my car. No intention on buying the sofware.

[ptlyon]

3 words - Peyton Manning's Buick

[Lzen]

Originally Posted by ptlyon

3 words - Peyton Manning's Buick

[kepp]

Originally Posted by ptlyon

3 words - Peyton Manning's Buick

[Bugeater]

This is why I drive a 1910 Hupmobile.

[BigMeatballDave]

Chevy is really pushing their 4g LTE option in their models.

Other than satellite/On Star, I don't know of any other way it could be hacked.

[ptlyon]

Originally Posted by BigMeatballDave

Chevy is really pushing their 4g LTE option in their models.

Other than satellite/On Star, I don't know of any other way it could be hacked.

My 2014 Silverado has that option. When first told about it, I thought "cool". My next thought was "how is it secured?".

[BigMeatballDave]

A friend has a 2014 Malibu. He has a phone number for his car.

[ptlyon]

Originally Posted by BigMeatballDave

A friend has a 2014 Malibu. He has a phone number for his car.

All Chevy's come with one that has On Star

[Lonewolf Ed]

Originally Posted by BigMeatballDave

A friend has a 2014 Malibu. He has a phone number for his car.

I have a 2015 and at the dealer, the salesman told me that if I wanted, he could show me how to start my car with my ipad while I was in Denmark. I looked at him and said, "What the hell for?" He could also hook my car up with a wifi hotspot. My car is for driving places not surfing the internet!

[DaveNull]

Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.

[Garcia Bronco]

Originally Posted by DaveNull

Details are coming soon at DEF CON and Blackhat in about a week and a half. From what I understand, the stuff that Jeep was using is different than OnStar.

No. It wasn't based on our discussions at work, but I am not sure. But Onstar or not..it's the chips themselves. The OnStar connection isn't being used or being piggybacked on to perform the hacking. Think of it more as OnStar accesses your systems through the same connection.