Slashdot Mirror


Using Tire Pressure Sensors To Spy On Cars

AngryDad writes "Beginning last September, all vehicles sold in the US have been required to have Tire Pressure Monitoring System (TPMS) installed. An article up at HexView enumerates privacy issues introduced by TPMS, and some of them look pretty scary. Did you know that traffic sensors on highways can be adopted to read TPMS data and track individual vehicles? How about an explosive device that sets itself off when the right vehicle passes nearby? TPMS has been discussed in the past, but I haven't seen its privacy implications analyzed before. Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."

47 of 203 comments (clear)

  1. Finally, an April Fools story!!! by jollyreaper · · Score: 2, Insightful

    This is a joke, I hope. *crosses fingers*

    --
    Kwisatz Haderach
    Sell the spice to CHOAM
    This Mahdi took Shaddam's Throne
    1. Re:Finally, an April Fools story!!! by cayenne8 · · Score: 2, Insightful
      "Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."

      How about another easy fix. Just disable the fscking thing.....

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    2. Re: Finally, an April Fools story!!! by transporter_ii · · Score: 2, Interesting

      "Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."

      Yeah, encryption would stop the little hacker down the street and keep them from setting up a road side explosive set just for you, but it wouldn't stop the government -- who would mandate a backdoor -- from doing it.

      And personally, I'm not really worried about the hacker down the street...if cars start blowing up I would bet money it would be government doing it...and not a foreign government, but our government (but of course, it would be blamed on terrorist and the population at large would give up ever last bit of the tiny amount of "freedom" that we have left to get those darn terrorist).

      Personally, I've never really been scared by any of the things our government keeps telling me I should be terrorized by, but what really scares me is the bleak future I see for my kids and their kids...caused by our own Orwellian, all-powerful government.

      transporter_ii

      --
      Doctors destroy health, lawyers destroy justice, universities destroy knowledge, religion destroys spirituality
    3. Re: Finally, an April Fools story!!! by c6gunner · · Score: 5, Funny

      Personally, I've never really been scared by any of the things our government keeps telling me I should be terrorized by, but what really scares me is the bleak future I see for my kids and their kids...caused by our own Orwellian, all-powerful government.
      Yeah, I soooooo hear ya on that one! You know what else scares me? Clowns. The government keeps saying that there's nothing to fear from clowns, but I know The Truth! Those colourful costumes and goofy makeup are the perfect disguises for Secret Service death squads, prowling our neighbourhoods and looking to assassinate or brainwash anyone they see purchasing organic tomatoes. It's downright terrifying!

      I'm glad to see that there's other right-minded folk like me on here! Keep up the good work Mr. Transporter!
  2. Headline: Tire PMS kills! Story at 11! by kiick · · Score: 3, Funny

    Sorry, Couldn't resist.

    This isn't an 4/1 joke, is it?

  3. Part of me feels paranoid now... by AioKits · · Score: 5, Funny

    Especially this part:
    How about an explosive device that sets itself off when the right vehicle passes nearby?
    Great, first I have to worry about the tolls on I-44 through Oklahoma, now I got to worry about exploding vehicles?
    Maybe in the future we can all roll to work in giant hamster balls. Getting groceries home will be a bitch tho...

    --
    "Quote me as saying I was mis-quoted." -Groucho Marx
    1. Re:Part of me feels paranoid now... by evil+agent · · Score: 4, Funny

      Maybe in the future we can all roll to work in giant hamster balls. Getting groceries home will be a bitch tho...

      Yeah, I learned this the hard way. Just make sure the food is enclosed in metal containers so the hamsters can't get to it.

      --
      End transmission.
    2. Re:Part of me feels paranoid now... by couchslug · · Score: 4, Interesting

      When the Red Army Faction assassinated Alfred Herrhausen in 1989, they used a photocell trigger to set off an "IED" in a bicycle bag. It was a superbly precise job which targeted the actual position in the car occupied by Herrhausen.

      Fast forward to now. One might scan the sensors on a target vehicle as it drives a common route, emplace IEDs on multiple routes, and break out the popcorn (or pita as the case may be) until the target drives by. This would be ideal for political hits where the target uses a specific armored vehicle.

      http://www.german-way.com/aherrhsn.html

      "Maybe in the future we can all roll to work in giant hamster balls."

      That would be quite a hamster.

      --
      "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
    3. Re:Part of me feels paranoid now... by AHuxley · · Score: 3, Insightful

      Yes the use of flash triggers is interesting as it was used get the British Army's radio jamming devices
      The real fun is who first thought of it :-)
      http://www.timesonline.co.uk/tol/news/uk/crime/article1530661.ece

      --
      Domestic spying is now "Benign Information Gathering"
    4. Re:Part of me feels paranoid now... by arivanov · · Score: 3, Funny
      This is Germans. They still study chemistry, physics and basic electronics and other freeky terrorist skills in school even today.

      I would not be afraid of such nasty things happening in an decent god-fearful rule obiding English Speaking country. This has long been taken care of through the amendments to the school and university curriculum. And if worst comes to worst control orders can be used from people taking high school chemistry courses: http://news.bbc.co.uk/1/hi/uk/7107265.stm

      --
      Baker's Law: Misery no longer loves company. Nowadays it insists on it
      http://www.sigsegv.cx/
  4. RFID tracking by nguy · · Score: 5, Insightful

    Tires already come with RFID tags, which can also be read and tracked remotely. Cars probably also emit all sorts of other unique signals that can be recognized and tracked.

    Of course, cars also come with this thing called a "license plate", which can also be tracked remotely and wirelessly.

    Basically, if you drive, you can be tracked.

    1. Re:RFID tracking by nguy · · Score: 5, Informative

      Using RFID combined with detectors at every street corner will allow for constant surveillance of every car all the time.

      So do license plate readers, and they can operate from greater distances and completely passively. Cost for a license plate reader is about the same as a good RFID reader, and they are probably at least as reliable. Furthermore, you are required to keep your license plate readable.

      Some cities are already starting to implement complete license plate-based tracking of vehicles.

    2. Re:RFID tracking by Introspective · · Score: 4, Insightful

      Basically, if you drive, you can be tracked. No. Certain objects attached to the car might be able to be tracked. There is a big difference between tracking tires, license plates, etc. and tracking people. A distinction which most posters seem to have ignored in their paranoia.

    3. Re:RFID tracking by everphilski · · Score: 2, Informative

      Kinda hard to do without puncturing the tire. Read up on it: here. Michelin at least seems to mount it inside the laminas of the tire.

      Of course you could always surround your tires in tin foil if you are THAT paranoid.

    4. Re:RFID tracking by taskiss · · Score: 2, Funny

      Sure, and you will then be denied the privilege of driving on the road that has the sensor that reads your tire pressure.

      By George, I think you've got it!

      --
      - real hackers don't have sigs -
    5. Re:RFID tracking by timeOday · · Score: 3, Informative

      You better tell these guys because their business is OCR'ing license plates. It's not research. I rent cars from Avis in Orlando fairly regularly and they have this option right now.

    6. Re:RFID tracking by ArcherB · · Score: 4, Funny

      Kinda hard to do without puncturing the tire. Read up on it: here. Michelin at least seems to mount it inside the laminas of the tire.

      Of course you could always surround your tires in tin foil if you are THAT paranoid. I hear that microwaving your tires for 15 seconds each will also disable the RFID tags.

      --
      There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    7. Re:RFID tracking by Cid+Highwind · · Score: 3, Insightful

      Mostly because it's a distinction that's sure to be ignored by law-enforcement types too. Ever recieved a photo-radar, red light or toll-evasion ticket? It doesn't matter who was driving, if your car was at the scene of the crime you're responsible for the fine.

      --
      0 1 - just my two bits
    8. Re:RFID tracking by Anonymous Coward · · Score: 2, Informative

      What I am worried about is the RFID tags embedded in Reynolds Wrap.

    9. Re:RFID tracking by afaik_ianal · · Score: 5, Informative

      Of course, cars also come with this thing called a "license plate", which can also be tracked remotely and wirelessly.

      I don't know about "wirelessly" unless you are talking about people using their eyeballs. On Australian highways (In my state of New South Wales, at least), we have special cameras located on overpasses and things every couple of hundred kilometres or so. These most definitely detect where the number plates are in the image, cut them out, perform OCR, then record the ones that are on trucks. It's used to enforce the laws preventing truckers from driving too far without sleep, and constant speeding.

      These cameras have been around for over 10 years, and I assure you, are highly accurate.

    10. Re:RFID tracking by afaik_ianal · · Score: 2, Funny

      ... and I can stuff beans up my nose if I want. But I don't.

    11. Re:RFID tracking by aurispector · · Score: 2, Funny

      REAL paranoics mine, smelt and roll out their OWN tinfoil.

      --
      I have mod points. The reign of terror begins now.
    12. Re:RFID tracking by Detritus · · Score: 2, Insightful
      Catching someone moving between point a and point b in 5.5 minutes, where point a and point b are 10km apart, equating to an average speed of ~110kph is much smarter - there is no doubt that the car in question was traveling over the speed limit for a sustained period of time.

      You are assuming that there are no discontinuities in the space-time continuum. I never leave home without my wormhole generator.

      --
      Mea navis aericumbens anguillis abundat
    13. Re:RFID tracking by plague3106 · · Score: 2, Informative

      Because if they actually ticketed everyone that broke the speed limit law, government would finally be forced to raise speed limits... especially since Australia is likely in the same spot as the US; illegally setting limits lower than dictated by civil engineers for the purpose of raising revenue and pushing more draconion measures on drivers.

  5. Hmmm.... by Otter · · Score: 3, Insightful
    How about an explosive device that sets itself off when the right vehicle passes nearby?

    Outside of Lebanon, I don't see this as being a huge concern. (And calling it a "privacy" issue seems a bit of an understatement.) The local governments aren't sufficiently motivated to fill potholes, let alone install IEDs specifically targeted at me.

  6. An easier solution... by porkmusket · · Score: 2, Insightful

    Remove the sensors and ignore the warning light. It's how I do things when I've got the winter wheels on, because I didn't feel like spending $400 for another set of sensors.

  7. The "solution" is not so simple. by hedronist · · Score: 2, Insightful
    "Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."

    Unfortunately, there is a major difference here: failure to encrypt keyless entry resulted in stolen cars (something which caught people's attention and pissed them off), whereas you'll never even notice that your TPMS isn't encrypted. People are incredibly lazy and only take action when they perceive a threat to their person or property. Liberty? As Dick Cheney would say, "So?"

    I'll bet adding encryption would cost the manufacturers $0.01 per tire (or some equally trivial amount), which they will claim will ruin them. Nobody else (except for a bunch of whiny, personal liberty freaks) will care about this and it will quietly become ubiquitous.

    Besides, if you aren't doing anything illegal, why should you care who takes note of your comings and goings. We're here to help you and we certainly can't do that unless we know where you are ... at all times ...

    1. Re:The "solution" is not so simple. by John+Whitley · · Score: 2, Interesting

      People are incredibly lazy and only take action when they perceive a threat to their person or property. Liberty? While I understand your frustration, I think it's ultimately misleading to tag people as "lazy" here. Misleading precisely because I tend to agree with you: most folk are "lazy", but that the term is so loaded with negative connotation that it stops further inquiry. Human beings are likey terribly poorly adapted to understanding and reacting to these kinds of threats. Many modern threats are really pretty damn abstract (to an essentially hunter-gatherer mind, anyhow) and require a fair bit of abstract thinking, education, and information to grasp. This presents a huge social risk to be managed: if many modern threats, incidental or deliberate, are difficult for people to properly assess.. our decisions as a society will be distorted dangerously as a result.

      I've recently seen reference to work discussing threat perception along these lines, but unfortunately quick searches aren't dredging it up right now. Handy references, anyone?
    2. Re:The "solution" is not so simple. by Kadin2048 · · Score: 4, Interesting

      The solution is even easier than encryption. Just don't broadcast a unique identifier!

      In this case there's no reason for each tire pressure sensor to be broadcasting one. All they need to do is chirp back the pressure inside the tire. That's it. Give them enough power to hit a receiver located in the wheel (which might be 4-6" away in a very large tire, probably a lot closer than that, and it's all inside the steel-belted tire) and call it a day. Unless you are playing Ben Hur, you're not going to get close enough to another car's tires for it to become a problem -- use a high frequency and you're going to get a substantial bit of attenuation via the tire itself, and then you're decreasing as the square of the distance through free space. You're never going to have more than one valve-stem sensor per wheel-mounted receiver, so why bother with it?

      If you really do need a weak form of identification, rather than hardcoding a UID, it would be pretty trivial to have each sensor randomly choose a number from a range such that the chance of collisions was low (deriving the randomness from resistor noise or by oversampling whatever analog sensor they use to determine pressure) and reset periodically or each time the car is started. That eliminates the problem of having to coordinate UIDs and prevent duplicates (cf. the cheap Bluetooth transceivers that caused problems because their MAC-ish addresses were all zeros). Every unit can be completely identical.

      On further consideration, I can't really imagine why the designers of the TPMS would have given each sensor a UID (especially since it would probably cause confusion when you rotate tires, if the car's computer tracks them) ... making me wonder if this is just an elaborate 4/1 hoax.

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  8. President authorizes warrentless tire tapping... by Digestromath · · Score: 5, Funny
    In the War on Terrorism, the president in his finite capacity for wisdom has authorized any government agency, with at least 3 letters in its acronym, to engage in acts of tire tapping without the need for endless judicial oversite.

    The government won't use this information to track you down to that seedy little motel on the side of route 9, where you cavort with no less than 3 women other than your wife. We only care about catching bad guys. Your wife however...

    If you have nothing to hide, you have nothing to fear but fear itself.

  9. Choose your role models carefully by Anonymous Coward · · Score: 2, Interesting

    KeeLoq has been cracked recently. The wireless access control system is used in vehicles built by Chrysler, Daewoo, Fiat, General Motors, Honda, Toyota (Lexus), Volvo, Volkswagen and Jaguar. All it takes to get access is to record two messages, which can be done from up to 300 feet away. http://www.heise.de/newsticker/meldung/105772

  10. Re:Tin Foil Hats!!! by dfm3 · · Score: 2, Funny

    Time to break out the tin foil hats so they can't read my tire pressures.

    Um, don't you mean tin foil rims?

  11. Re:Tin Foil Hats!!! by Hatta · · Score: 2, Funny

    Or tin foil hub caps.

    --
    Give me Classic Slashdot or give me death!
  12. Can we get a car analogy for this? by Digestromath · · Score: 4, Funny

    I'm having trouble grasping the concepts, can someone put it into a nice analogy using cars? What... wait... damnit.

  13. Re:OnStar by Intron · · Score: 2, Interesting

    There was a previous article about remote shutdown using OnStar which mentioned that OnStar can be used to remotely eavesdrop on your conversations. The OnStar rep didn't answer when I asked them why they included that capability.

    --
    Intron: the portion of DNA which expresses nothing useful.
  14. Bubbling up from the lower levels by Apotsy · · Score: 2, Interesting
    Here's a guy posting about a very similar subject on this site a while ago:

    http://slashdot.org/comments.pl?sid=05/04/02/2351243&cid=12123337&threshold=-1&commentsort=0&mode=nested Not sure how many people took it seriously at the time, but it sounds like it's getting more and more towards mainstream awareness, especially with this new system. 20 years from now, could a person move around at all, on foot or otherwise, without the powers that be knowing about it?
  15. ABS Sensor by kd5ujz · · Score: 2, Interesting

    I am not sure about the new mandate ( assuming its not an April fools joke), but the TPS sensor on my work car (2001 Alero) is the same sensor used for the anti-lock brakes. The ABS computer reads the ABS sensors, and any sensor that is spinning faster than the other three tires is assumed to be a flat tire ( lower diameter causes higher RPMs for a given surface speed).

    --
    -William
    God is everything science has yet to explain.
    1. Re:ABS Sensor by Bombria · · Score: 2, Funny

      I just want to know what the cover sheet for all those TPS reports is going to look like.

  16. Re:Get outta town by Jherek+Carnelian · · Score: 2, Insightful

    I am guarnateed totally 100% anonymity anywhere I go in public! It's a guarnateed right in the USA Constitution. Don't give me any of this "I can see you" bS!!!!!!!! Being seen and identified by a person or agent of the government on the street is one thing - that's how its been for thousands of years.

    Having every movement of every person on the street automatically recorded, indexed and cataloged into nationwide databases without the any human intervention is a completely different matter - that's a recipe for totalitarianism.

    Right now, we are rapidly barreling down the road from how its been for thousands of years to the ultimate totalitarian state with very little good to show for it beyond political rhetoric.
  17. Probably not a 4/1 story. by gardyloo · · Score: 3, Informative
    Here (at the end of this post) is the text of the applicable document summarizing the TREAD act.
    http://www.tireindustry.org/pdf/TREAD_Act_Summary.pdf

        Looks to me that no one is requiring continual monitoring (and reporting) of tires' conditions; only when the tire pressure falls below 25% of recommended cold pressure is a signal required to be sent (and I see nothing about being able to tell which car in a fleet has the problem from outside the car itself).

        Finally, article summary should say "all NEW vehicles sold in the US" require the system, not "all vehicles sold in the US".

    The final rule was published June 5, 2002. Unfortunately NHTSA
    proposed that if a vehicle is using a direct system (with sensors in each
    tire sending a signal to the dashboard) the TPMS does not have to trigger
    until the tire is 25 percent below the recommended cold psi. An indirect
    TPMS (that runs off the anti-lock braking system) does not have to
    trigger until the tire is 30 percent below the recommended cold psi for
    that tire. TIA is strongly opposed to NHTSA's supposed "safety"
    regulation which in effect allows the motoring public to drive on severely
    underinflated tires. TIA has supported a petition that NHTSA mandate
    reserve inflation pressure in tires to offset the TPMS rule. [See letter to
    NHTSA supporting petition.]
  18. Hamsters by Pseudonymus+Bosch · · Score: 2, Informative

    Getting groceries home will be a bitch tho...

    Didn't hamsters solve that by carrying food in their cheeks?

    --
    __
    Men with no respect for life must never be allowed to control the ultimate instruments of death.
    GW Bu
  19. How the new TPMS sensors work. by Anonymous Coward · · Score: 2, Informative

    Basically, the new mandated TPMS sensors are all direct sensors. These sensors have been mandated as of the 2007 model year on all cars sold in the US. (There are a large number of cars sold in Canada that use this system too, but it is not mandated in Canada). Indirect systems (the ones that use the ABS sensors) are not allowed under the mandate as they were deemed too inaccurate. The TPM system is mandated to notify the driver once there is a 25% loss of pressure from nominal from the tire. Many systems also indicate a high pressure warning also.

    Most car companies have been developing the technology for over a decade. GM started in the mid 90's on the corvette.

    Most systems use a pressure sensor internally mounted to the rim on the valve stem. The valve stem acts as the antenna for the transmitter. (Look for cars with aluminum coloured valve stems, these are TPMS equiped vehicles.) The transmitter will transmit at the same frequency as your key FOB. This allows the car companies to minimize the amount of extra equipment required for the system. Most systems probably only require the sensors and a reprogramming of the requisit computers in the car.

    Pay close attention to the shop that changes your tires. Many shops are poorly trained in dealing with TPMS sensors and tell many lies about the systems as they don't understand how they work.

    The sensors typically operate under a pretty simple algorithm. Basically, when the car is stationary the sensors will transmit every hour. If the car starts moving above a certain speed they sensors will start to transmit every minute. If the pressure in the tire suddenly changes more then a certain amount, the sensor will transmit the new pressure immeditatly. Each sensor has a unique ID to permit the computer to identify which corresponds to which pressure. The car's computer will be programmed to listen for these transimssions. Should the car fail to receive a transmission from a specifc tire over a certain period of time, then the computer will indicate there is a malfunction of the system.

    Because the sensors have unique IDs it is typically required to relearn the sensor locations after a tire rotation. There are many different releasern procedures. You can set the car into learn mode and triger each sensor by letting air you of the tires or you can use a specific TPMS tool to triger the sensors using a LF magnetic field.

    These systems are all pretty straight forward once you know how they work. Most people are afraid of new technology, but in most respects this is pretty simple stuff that any modern mechanic should have no problem working with.

  20. Re:OnStar by geekoid · · Score: 5, Funny

    I know 1 person with on star, and they were in a bad accident, having the OnStar saved her life.

    Clearly OnStar causes accidents.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  21. oblig. Buckaroo Bonzai quote by transporter_ii · · Score: 2, Funny

    Laugh-a while you can, monkey boy!

    --
    Doctors destroy health, lawyers destroy justice, universities destroy knowledge, religion destroys spirituality
  22. Not good for criminals by Jaxoreth · · Score: 2, Funny

    My main concern is that some hacker kid is going to break into the traffic management network and use their monitoring systems to analyze the tire pressure on my trucks to figure out which ones are decoys and which one actually has the gold in it, at which point by manipulating the traffic signals he'll coerce it over to the right spot and blow up the street out from underneath it so it drops underground, where thieves are waiting to steal the gold.

    --
    In general, it is safe and legal to kill your children. -- POSIX Programmer's Guide
  23. Run flat tires need TPMS by enosys · · Score: 3, Insightful

    The article asks why would NHTSA choose TPMS and not run-flat technology. Run-flat tires cannot be used indefinitely while uninflated or underinflated. Generally, in such situations the sidewall supports the load, and the resulting stress on the sidewall damages it, eventually leading to failure. Furthermore, you might not be able to see that the tire isn't properly inflated. In order to prevent people from driving on underinflated run-flat tires until a catastrophic failure and possible accident, TPMS is required. Oh, and run-flat tires have other disadvantages too.

  24. Huh? by seanadams.com · · Score: 3, Insightful

    There is a big difference between tracking tires, license plates, etc. and tracking people.

    In what way is tracking a person's possessions NOT a damned effective way of tracking the person?!?!

    Do complete strangers drive your car often? So you see no need for concern until a tracking device is implanted directly into your skull?