Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hacking a Car With Music

Posted by timothy on from the lady-gaga's-secret-plan dept.

itwbennett writes "Researchers at the University of California, San Diego, and the University of Washington have identified a handful of ways a hacker could break into a car, including attacks over the car's Bluetooth and cellular network systems, or through malicious software in the diagnostic tools used in automotive repair shops. But their most interesting attack focused on the car stereo. By adding extra code to a digital music file, they were able to turn a song burned to CD into a Trojan horse. When played on the car's stereo, this song could alter the firmware of the car's stereo system, giving attackers an entry point to change other components on the car. This type of attack could be spread on file-sharing networks without arousing suspicion, they believe. 'It's hard to think of something more innocuous than a song,' said Stefan Savage, a professor at the University of California."

3 of 133 comments (clear)

  1. Uh, what? by gman003 · · Score: 5, Interesting

    I can accept malicious data taking over the stereo system. That's believable. What I find impossible is going from there to the rest of the car. I installed my own stereo system - the only wires involved were power and output to the speakers. That's it. Unless they can find an exploit in a 12v battery, they literally cannot get to anything automotive.

    Maybe newer cars, where everything is "integrated", are different. In which case, I'm glad I bought a used '99 Talon rather than a brand-new anything.

    1. Re:Uh, what? by MacGyver2210 · · Score: 3, Interesting

      I've never seen a keyless entry system connected to a CAN bus.

      I have in no way worked on all cars out there, but that would be what we with common sense call 'poor system design'.

      --
      If the only way you can accept an assertion is by faith, then you are conceding that it can't be taken on its own merits
  2. Sounds like my AV receiver by tlhIngan · · Score: 3, Interesting

    After obtaining a service manual for my AV Receiver, firmware updates are done by using a CD player with digital out, and hooking it to the TOSlink input on the front.

    Put it in a special service mode, put a specially burned CD in the CD player, and hit play. The AV receiver grabs the firmware update information off the digital input.

    Presumably there's safeguards to ensure that the firmware is transferred correctly, as well as various sync signals to ensure that if you accidentally seeked at the beginning or the player skipped it would be detected.

    Probably not a simple modulated audio stream since that'll be quite slow.