Hacking is now a problem

Kinja'd!!! "CB" (jrcb)
07/21/2015 at 12:50 • Filed to: None

Kinja'd!!!0 Kinja'd!!! 21

Got linked !!!error: Indecipherable SUB-paragraph formatting!!! about how two guys have found an exploit in Chrysler’s UConnect system and were able to mess with a Jeep with it. It’s pretty interesting, although mildly terrifying.


DISCUSSION (21)


Kinja'd!!! SidewaysOnDirt still misses Bowie > CB
07/21/2015 at 12:53

Kinja'd!!!0

I challenge them to try to hack into my MR2.


Kinja'd!!! McMike > CB
07/21/2015 at 12:54

Kinja'd!!!1

I hope you’re happy, Stephanie.

Kinja'd!!!


Kinja'd!!! G_Body_Man: Sponsored by the number 3 > CB
07/21/2015 at 12:56

Kinja'd!!!0

Good thing I'm buying a scooter, lolololololololol


Kinja'd!!! Smallbear wants a modern Syclone, local Maple Leafs spammer > CB
07/21/2015 at 12:58

Kinja'd!!!0

So:

Bluetooth only as far as phone integration goes.

No OTA updates.


Kinja'd!!! extraspecialbitter > SidewaysOnDirt still misses Bowie
07/21/2015 at 13:03

Kinja'd!!!4

Kinja'd!!!


Kinja'd!!! Zipppy, Mazdurp builder, Probeski owner and former ricerboy > CB
07/21/2015 at 13:03

Kinja'd!!!0

yyyeah. I’ll pass on these types of cars.


Kinja'd!!! Zipppy, Mazdurp builder, Probeski owner and former ricerboy > McMike
07/21/2015 at 13:04

Kinja'd!!!0

what’s that from?


Kinja'd!!! HammerheadFistpunch > CB
07/21/2015 at 13:16

Kinja'd!!!0

now why...WHY is the infotainment connected to the CANBUS again? I’ve never understood this.


Kinja'd!!! Blunion05 drives a pink S2000 (USER WAS BANNED FOR THIS POST) > CB
07/21/2015 at 13:18

Kinja'd!!!0

I’m glad my tastes in automotive design have stopped evolving. I’m hating pedestrian cars made after the 2000s more and more.


Kinja'd!!! McMike > Zipppy, Mazdurp builder, Probeski owner and former ricerboy
07/21/2015 at 13:24

Kinja'd!!!0

@0:17

It’s as annoying as those “grounded to the ground” Toyota idiots.


Kinja'd!!! Jordan and the Slowrunner, Boomer Intensifies > Zipppy, Mazdurp builder, Probeski owner and former ricerboy
07/21/2015 at 13:25

Kinja'd!!!0

I think that is the WiFi dream girl from the Chevy commercials.


Kinja'd!!! CB > HammerheadFistpunch
07/21/2015 at 13:26

Kinja'd!!!0

That was my thinking.


Kinja'd!!! Zipppy, Mazdurp builder, Probeski owner and former ricerboy > McMike
07/21/2015 at 13:26

Kinja'd!!!0

Oh.

My.

God.

Yeah, that’s pretty damn annoying.


Kinja'd!!! Zipppy, Mazdurp builder, Probeski owner and former ricerboy > Jordan and the Slowrunner, Boomer Intensifies
07/21/2015 at 13:27

Kinja'd!!!0

indeed it is, check McMike’s reply.


Kinja'd!!! Tekamul > CB
07/21/2015 at 13:30

Kinja'd!!!0

Yeah, no connectivity for me, thanks.

No to cell antennas, no to WiFi. I like my car as a closed system. I doubt anybody’s been stupid enough to connect the FM monopole or AM loop into any chip of significance, which could have access to the CANBUS. But if it happens, that head unit is right out of there!

I’ll go back to an mp3 player and an amp if I have to.


Kinja'd!!! whoarder is tellurium > HammerheadFistpunch
07/21/2015 at 14:04

Kinja'd!!!0

Steering wheel controls, speed sensitive volume, HVAC controls, outside air temperature, rear view camera, rear defroster controls... etc.

It is useful to have info from and control of other modules on the network.


Kinja'd!!! HammerheadFistpunch > whoarder is tellurium
07/21/2015 at 14:08

Kinja'd!!!0

I guess I should ask then: why is the entire CAN bus free from physical or electronic fire breaks? I see the value of it, but not at the expense of an all or nothing strategy. There needs to be some physical (in my mind at least) break from critical systems.


Kinja'd!!! whoarder is tellurium > HammerheadFistpunch
07/21/2015 at 14:33

Kinja'd!!!0

I’m not sure what manufacturers were thinking... especially on matters of security. However, from my own experience, manufacturers generally focus a lot on preventing software code from being cracked or modified. This is for purposes of controlling warranty coverage, government mandated emissions and trying to prevent aftermarket reproduction.

Other than that, a vulnerability is a vulnerability and every computerized system has one. You start to introduce outside systems that connect to vehicle networks either by wire or wireless and that will present an issue sometime. It is intensified because they’re on a network and share information. Its the same reason why Apple and Microsoft release security updates and patches. There are people out there that dedicate their lives to hacking n’ cracking systems for “pleasure” (good or evil).

Sure, you could add secondary systems to certain key modules that provide exclusive information... but that would add complexity over the whole system that was designed to “reduce” it.

Lastly, the automotive industry isn’t the only one with this sudden problem. In general, its any computer aided transportation system with networks.


Kinja'd!!! HammerheadFistpunch > whoarder is tellurium
07/21/2015 at 14:37

Kinja'd!!!1

I guess my point is that there should be some functions of the system that are considered sacred enough not to be allowed to share bandwidth with less critical systems. The only kind of security thats worth a damn is to physically separate and make redundant. sure, its a relatively small issue now, but as we stand at the dawn of the driverless car, I think we can all agree that it has potential for HUGE consequences, if not high frequency. We should be working now to set precedents for the future of transportation, and I don’t think that software is the key.


Kinja'd!!! whoarder is tellurium > HammerheadFistpunch
07/21/2015 at 14:48

Kinja'd!!!0

I believe your point is exactly why we cherish manual transmissions, cars with no electronic driver aids and cable controlled throttle. (or at least I do)


Kinja'd!!! HammerheadFistpunch > whoarder is tellurium
07/21/2015 at 14:50

Kinja'd!!!0

A reason I love them as well, sadly there wasn’t a choice for me when it came to the car I wanted. Good news is that hackers are going to have a hell of a time remotely accessing my car, even my key fob has a hard time remotely accessing it.