Remote Car Hacking Is Now a Reality

[allodial]

Remote Car Hacking Is Now a Reality
By Doug Newcomb
July 24, 2015 A pair of security experts take control of a vehicle from a computer miles away to prove a point.


Until now, car hacking demos were done only while security researchers were hard-wired into a vehicle's electrical system. There was just one documented real-world case of remote car hacking in 2010, but that was an inside job by a disgruntled car dealer employee, who bricked over 100 vehicles by taking advantage of technology designed to allow remote repossession.

OpinionsBut earlier this week, two security researchers who have made exposing connected car vulnerabilities somewhat of a crusade showed in dramatic and somewhat dangerous fashion how they were able to remotely disable critical systems of a 2014 Jeep Cherokee while the vehicle was on a St. Louis highway. Charlie Miller, a security researcher at Twitter, and Chris Valasek, director of vehicle security research at IOActive, made headlines two years ago by showing how they could honk the horn, cinch the seat belts, kill the brakes, and control the steering wheel of a Ford Escape and Toyota Prius from the backseat using laptops and a physical connection to the vehicles.

Their follow-up, once again with writer Andy Greenberg at the wheel, was intended to scare car companies and car owners by proving that vehicles can be remotely hacked to cause havoc on the highway. While sitting in Miller's basement miles away, the pair used a security vulnerability in the vehicle's Uconnect infotainment system to blast the AC, tune to a hip-hop radio station and crank the stereo system, turn on the windshield wiper and washer, and post a snarky picture on the in-dash display of themselves in matching track suits.

To drive home their point about the vulnerabilities of modern connected cars, they disabled the transmission, causing the Jeep to lose acceleration on the highway, with a semi bearing down on it. Later, in a parking lot, they also deactivated the Jeep's brakes, causing it to slide into a ditch with Greenberg at the wheel.

(source/more)

In a broad-reaching report by 60 Minutes about DARPA and the Internet of Things, the Department of Defense has shown that it can hack General Motors' OnStar system to remote control a last-gen Chevrolet Impala. (more)

Related:

• Remote Car Hacking Is Now a Reality
• Full Remote Control Of ALL Modern U.S. Market Cars
• Hackers Were Able to Remotely Control A Jeep Cherokee's Radio and Even Turn Off the Transmission
• Experimental Security Analysis of a Modern Automobile (PDF--16 pages) (alternative link)
• Security Researchers Hack A Car and Apply the Brakes Via Text
• DARPA Hacks GM's OnStar To Remote Control A Chevrolet Impala
• Hackers Discover A Way to Hack Into Your Car's Remote Control App (ubergizmo.com)