The Future of Hi-Tech Auto Theft

Yes, by Moheeheeko · 2012-01-12 07:36 · Score: 5, Funny

Yes I would download a car.

Re:Yes, by Anonymous Coward · 2012-01-12 08:12 · Score: 1

I would only download the cracked DRM-free version.
Re:Yes, by Hoi+Polloi · 2012-01-12 08:39 · Score: 2

Wait until 3D printer copies of your car start appearing. "Hey, he has the same bumper sticker and fast food wrappers in the front seat..."

--
It is by the juice of the coffee bean that thoughts acquire speed, the teeth acquire stains. The stains become a warning
Re:Yes, by forkfail · 2012-01-12 08:55 · Score: 3, Insightful

What happens if the app store decides to disable your car, though?

--
Check your premises.
Re:Yes, by Anonymous Coward · 2012-01-12 09:23 · Score: 1

Wait - that's copyright infringement. Cue the CARMAA - CAR Manufacturers and Assemblers Association - police to go on a rampage suing people.
Re:Yes, by N0Man74 · 2012-01-12 11:18 · Score: 3, Funny

Yes, in the future, when 3D printers improve by leaps and bounds and when the Music and Movie industries have won and it will become illegal to hum copyrighted works in the elevator, we will see Public Service Advertisements that say...
"You wouldn't steal a song would you!? Don't steal that car! Downloading a car is illegal!"
Re:Yes, by onceice · 2012-01-12 17:30 · Score: 1

For brief phrase North Face Clearance ,

what will they do with stolen cars? by alen · 2012-01-12 07:37 · Score: 4, Informative

one of the reasons auto theft declined is police busted and closed chop shops that took and resold the parts. and you can now buy cheap off brand parts for any car as well. not like anyone stole cars back in the day for personal use

Re:what will they do with stolen cars? by Anonymous Coward · 2012-01-12 07:41 · Score: 2, Informative

Joyriding must be a foreign concept to you then...
Re:what will they do with stolen cars? by hedwards · 2012-01-12 07:47 · Score: 4, Interesting

That's one, but around here it's increasingly common for cars to be stolen and then returned hours later after having completed a drug run in the stolen vehicle.
Beyond that bait cars and lojacks as well as other countermeasures make it a lot more likely that car thieves will be caught before they can profit from their crime.
Re:what will they do with stolen cars? by AlienSexist · 2012-01-12 07:47 · Score: 5, Informative

My understanding is that there is a very hot market for stolen whole cars in Asia, Mexico, and Central & South America. Driven across the border to Mexico for further distribution, sometimes by ship. Pickup trucks in particular are being taken for this purpose. You're right though. Most often cars are not stolen, only broken into for their contents or disassembled for valuable parts. Catalytic converter thefts have been very high because they contain various mixtures of platinum, palladium, rhodium and prices for those precious metals were very high. Just like there's been a huge rash in national copper thefts.
Re:what will they do with stolen cars? by Anonymous Coward · 2012-01-12 07:58 · Score: 5, Interesting

Here in Texas, car theft is up because there is one type of vehicle highly sought after: Larger pickups, SUVs, and 4x4s in general. These are promptly taken to the border to smash through the excuse of a fence and to ferry weapons to Mexico, and narcotics/illegals back to the US. A good diesel 4x4 is prized down there because it can easily outrun police vehicles over the terrain. They also are taken to Mexico to be up-armored.
The trick I do with keeping the vehicle from being "borrowed" is the classic kill switch. However, I use two. One is for the fuel pump, the other one turns on and off the RFID antenna. This way, someone trying to clone a PATS key might get my key's serial number, but when they try to jam a clone in the vehicle, it will just give them the middle finger.
Re:what will they do with stolen cars? by cayenne8 · 2012-01-12 08:06 · Score: 1

. Catalytic converter thefts have been very high because they contain various mixtures of platinum, palladium, rhodium and prices for those precious metals were very high.
Hmm...now, I'd not have a problem with them taking my catalytic converter off the car (leave me the car)...with less air restriction, I'd likely have more performance!!
And, not like I live where they do sniff tests on inspections....I've never lived where they do that..sounds like a PITA.

--
Light travels faster than sound. This is why some people appear bright until you hear them speak.........
Re:what will they do with stolen cars? by CyberTech · 2012-01-12 08:35 · Score: 2

. Catalytic converter thefts have been very high because they contain various mixtures of platinum, palladium, rhodium and prices for those precious metals were very high.
Hmm...now, I'd not have a problem with them taking my catalytic converter off the car (leave me the car)...with less air restriction, I'd likely have more performance!!
And, not like I live where they do sniff tests on inspections....I've never lived where they do that..sounds like a PITA.
If your car is like mine was, they wouldn't need to do sniff tests. They'd hear you coming. My catalytic converter was cut out of my 4Runner while in the parking lot at work. I left work at around 4pm, started it up, and nearly shit a brick. It was the loudest vehicle I'd ever heard, I thought it was broken, lol!
Brought a friend out to listen while i started it, he's peering around, and says... "wtf, where's your cc?" Just a pile of metal shavings :)

--
-- CyberTech
Re:what will they do with stolen cars? by clm1970 · 2012-01-12 08:47 · Score: 3, Interesting

Yep. I had an older but still running Toyota pickup. I sold it to a couple of guys who were taking it to Guatemala. Make them come to the bank first so they could certify the bills were not fake as they insisted on paying in cash. DA's office said no known scam going around like that but it was a little freaky to say the least.
Re:what will they do with stolen cars? by Anonymous Coward · 2012-01-12 08:53 · Score: 5, Informative

Joyriding isn't stealing. At least not in the UK. Theft (aka stealing) requires an intention to permanently deprive, which joyriding lacks. Joyriding is why the offence of taking without consent (aka TWOCing) was introduced.
Re:what will they do with stolen cars? by cayenne8 · 2012-01-12 09:15 · Score: 2

If your car is like mine was, they wouldn't need to do sniff tests. They'd hear you coming. My catalytic converter was cut out of my 4Runner while in the parking lot at work. I left work at around 4pm, started it up, and nearly shit a brick. It was the loudest vehicle I'd ever heard, I thought it was broken, lol!
Well, I guess I was thinking ahead...and just figuring to weld in a straight pipe in its place.
I guess a larger question of mine is..how do they manage to do this in public? I mean...someone in a parking lot under a jacked up car with a blowtorch to cut the thing out...would likely raise alarms anywhere I could think of....
I mean..is there no security in your work parking lot? Or at least..other people usually around? I just have a problem thinking of where my car would ever be parked where someone could come in, an cut my exhaust system apart to get pieces of it...I'd seriously never heard of this till this thread.

--
Light travels faster than sound. This is why some people appear bright until you hear them speak.........
Re:what will they do with stolen cars? by Shakrai · 2012-01-12 09:20 · Score: 5, Funny

That's one, but around here it's increasingly common for cars to be stolen and then returned hours later after having completed a drug run in the stolen vehicle.
The last time I parked my car in a New York City dirt lot it was returned to me with 30 extra miles on odometer. It was also washed, detailed and had a full tank of gas. I don't want to think about what they did with my car but at least they were polite about it....

--
I want peace on earth and goodwill toward man.
We are the United States Government! We don't do that sort of thing.
Re:what will they do with stolen cars? by johnny+cashed · 2012-01-12 09:25 · Score: 3, Informative

4runner is a truck, no need for a jack. They make pipe cutters with multiple wheels on a chain and a vise-grip like handle. It allows for plumbers to do repairs in tight spaces. Quiet, quick. Or just turn up your stereo while your buddy uses a cordless sawzall (TM).
Re:what will they do with stolen cars? by Mashiki · 2012-01-12 09:49 · Score: 3, Informative

Here in Canada, auto theft is roughly the same. Most cars aren't chopped and sold. Anything from '09-99, they're devinned, and resold with a remarked vin from a wreck. Strip-vinning has long since gone out of style because it's a hassle, every part on cars made in the last 5 years or so has the VIN on it. From the windows, and bumpers, to the air and A/C compressor, down to the taillamp and wiring harness. So it did it's job. Their favorite targets are mostly cars/trucks/suv's in the '02-08 range where VINs were only stamped on engine/body frames. And where salvages are easy to find. So fair warning, see a deal, get it checked. And double check that dash VIN against the body, frame and engine. Otherwise, your vehicle is forfeit nearly everywhere to the owner, and you're out your money.
The new thing is to simply either pull up and drive away with the vehicle using a stolen tow, or they pay a tow driver on the side to dump a vehicle somewhere. And then strip out the computer and replace it with a new one along with a new keyset. These are then sold overseas, mostly in russia, china and the middle east.

--
Om, nomnomnom...
Re:what will they do with stolen cars? by GameboyRMH · 2012-01-12 09:59 · Score: 4, Funny

There's a truck in Texas with a kill switch, oh noes!

--
"When information is power, privacy is freedom" - Jah-Wren Ryel
Re:what will they do with stolen cars? by scharkalvin · 2012-01-12 10:22 · Score: 2

That reminds me of an episode of the "Top Cat" cartoon where the guys made money parking cars and renting them out for the day.
Re:what will they do with stolen cars? by Anonymous Coward · 2012-01-12 11:18 · Score: 1

Nah, nothing freaky about it. I drive a '91 Toyota pickup and I am constantly getting offers for it, usually from Guatemalans. For some reason they really love those Toyota pickups.
As for the insistence on paying cash... it's pretty common for people who are not here legally to avoid banks.
Re:what will they do with stolen cars? by sgt+scrub · 2012-01-12 11:42 · Score: 1

roflmao

--
Having to work for a living is the root of all evil.
Re:what will they do with stolen cars? by Garybaldy · 2012-01-12 11:53 · Score: 1, Flamebait

We used to have a joyriding crime here in the US. however our politicians wanting more people in jail and fewer people qualified to get jobs. Decided joyriding should be reclassified as grand theft auto and be a felony.
Re:what will they do with stolen cars? by Garybaldy · 2012-01-12 11:54 · Score: 1

Odd i have had two coworkers have vehicles stolen outside the Georgia Dome in the last year.
Re:what will they do with stolen cars? by couchslug · 2012-01-12 12:09 · Score: 1

It's mostly the "busting" part. Cheap sheet metal and cheap plastic bumper covers abound, but many other parts are still painfully expensive.
The dealer I worked for would routinely buy complete wrecks at auction for parts and make a nice profit!

--
"This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
Re:what will they do with stolen cars? by couchslug · 2012-01-12 12:17 · Score: 1

That's why it should be legal and encouraged to use lethal force to protect property. Good people don't steal.
Pulling the fuel pump fuse or ECU fuse and replacing with a dummy works well too, and is invisible unless the thief pulls that fuse.
My bud had several steering columns ruined on his wrecker over the years, but it was never stolen. Columns are free when you do salvage and he got very quick at swapping them out!

--
"This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
Re:what will they do with stolen cars? by frosty_tsm · 2012-01-12 13:53 · Score: 1

We used to have a joyriding crime here in the US. however our politicians wanting more people in jail and fewer people qualified to get jobs. Decided joyriding should be reclassified as grand theft auto and be a felony.
I'm sorry but some high/drunk/stupid 22 year old who steals my car to drive all over the county, who may be driving recklessly (and might get into an accident) and who is depriving me of my property (which even without an accident is still damaged) deserves prison time. This isn't "oh no, someone parked in my parking spot." This is "some just took my way to get to work or my ability to get food."

You used to be able to shoot someone if they tried to steal your horse. I'm not advocating violence, but this isn't exactly a crime our ancestors took lightly.
Re:what will they do with stolen cars? by Garybaldy · 2012-01-12 14:02 · Score: 1

I understand. This is the US. We want every criminal put away for life or executed no mater how serious/minor. Just in our blood. Well US blood anyway.
I was just replying that we used to have similar laws.
Re:what will they do with stolen cars? by CyberTech · 2012-01-12 14:09 · Score: 3, Interesting

Correct. They used a cordless tool to do it. There is video.. the only car that parked next to the truck all day only stopped for 90 seconds. That's all the time it took :)

--
-- CyberTech
Re:what will they do with stolen cars? by Grishnakh · 2012-01-12 15:28 · Score: 1

Wrong. Personal use is a big reason for stealing cars here in Arizona; Mexicans coyotes steal them and use them for transporting illegal immigrants through the desert all the time. However, they generally steal large pickup trucks and the like for obvious practicality reasons, not small cars. I've had two different coworkers get their big trucks stolen in the past 10 years.
Re:what will they do with stolen cars? by Grishnakh · 2012-01-12 15:38 · Score: 1

I haven't heard of this lately, but I heard of a rash of this type of thing back around 2008. CC thieves typically struck SUVs and pickups, since it's easy to get under them when they're parked (with my car, by contrast, you have to jack it up unless you're a small child). The way they do it is simple: a cordless sawzall (reciprocating saw). You don't need a blowtorch to cut an exhaust pipe; a sawzall will zip through one in seconds.
Security in work parking lots? Are you kidding? I used to work at Intel here in Arizona, where they have security driving around in golf carts occasionally, and Securitas personnel at every public entrance. There's cameras everywhere. One of my coworkers left to go home one day and his big truck was missing. Security was no help, other than helping him file a police report.
Back in the 1990s, I interned at a large government contractor, where Secret and Top Secret classified material was handled. The building I worked in at one point was in the middle of a ghetto in downtown Newport News. The parking lot was surrounded by barbed-wire fences, though the gates were left open in the daytime. It wasn't unheard of for cars to be stolen, and they had a lot of problems with neighborhood youths vandalizing the cars.
The security at workplaces isn't for employee vehicles, it's for the company's property and information, and that's it. They have security to limit access to the building, and make sure people don't walk off with any secrets. They don't give a shit if someone steals your car.
Re:what will they do with stolen cars? by Grishnakh · 2012-01-12 15:41 · Score: 1

Yep, I'm sure the thieves will easily find this guy's truck and steal it with this information. It's not like there's a lot of trucks in Texas.
Re:what will they do with stolen cars? by torkus · 2012-01-13 01:06 · Score: 1

No no no...we want every criminal put away for life or until rehabilitated* no matter how minor the crime. We ALSO want NO criminals executed no matter how serious the crime. Texas may disagree occasionally but typically there's plenty of outcry against capital punishment.
With this high tech theft, maybe someone will be able to deprive you of income derived from your car while still leaving the car intact in your garage. You should be entitled to $1biiiiiillion dooolars in compensation based on current trends.
*rehabilitated to be defined as a properly trained criminal that is either dumb enough to get caught immediately or smart enough not to get caught the next time

--
You can get rich if you own a politician, but you have to be rich to buy one in the first place.
Re:what will they do with stolen cars? by tehcyder · 2012-01-13 02:25 · Score: 1

You used to be able to shoot someone if they tried to steal your horse.
Back in the good old days you could be hanged for stealing a loaf of bread. Thanks to political correctness gone mad, if you try to stop someone shoplifting you're likely to be put in prison yourself, as though a damn good thrashing ever did me any harm.

--
To have a right to do a thing is not at all the same as to be right in doing it
Re:what will they do with stolen cars? by tehcyder · 2012-01-13 02:28 · Score: 1

That's one, but around here it's increasingly common for cars to be stolen and then returned hours later after having completed a drug run in the stolen vehicle.
The last time I parked my car in a New York City dirt lot it was returned to me with 30 extra miles on odometer. It was also washed, detailed and had a full tank of gas. I don't want to think about what they did with my car but at least they were polite about it....
If someone borrows your car to commit a brutal and bloody gangland slaying, of course they're going to clean away the evidence before returning it. The full tank of gas is a weird one though, maybe they'd intended to set fire to it but forgot.

--
To have a right to do a thing is not at all the same as to be right in doing it
Re:what will they do with stolen cars? by tehcyder · 2012-01-13 02:38 · Score: 1

That's why it should be legal and encouraged to use lethal force to protect property. Good people don't steal.
Where I live, human life is valued above property. You can only use lethal force in self defence. I suppose that you'd call it European socialism.

--
To have a right to do a thing is not at all the same as to be right in doing it
Re:what will they do with stolen cars? by swalve · 2012-01-13 03:31 · Score: 1

The full tank of gas is a payoff to the owner to keep his mouth shut.
Re:what will they do with stolen cars? by Raenex · 2012-01-13 03:44 · Score: 1

What the hell is wrong with you apologists? Do you know how expensive and important a car is for most people? What kind of excuse can you make for people to take the property of others, whether it's "for fun" or otherwise?
Re:what will they do with stolen cars? by rocket+rancher · 2012-01-13 05:55 · Score: 1

You used to be able to shoot someone if they tried to steal your horse. I'm not advocating violence, but this isn't exactly a crime our ancestors took lightly.
Well, in the civilized state of Arizona, you still can. In fact, you face less legal hassle if you cap a thief in the act, than you would if you capped somebody who was trying to kill you.
Re:what will they do with stolen cars? by rocket+rancher · 2012-01-13 06:19 · Score: 1

one of the reasons auto theft declined is police busted and closed chop shops that took and resold the parts. and you can now buy cheap off brand parts for any car as well. not like anyone stole cars back in the day for personal use
Hmmm. I don't think reselling parts is why vehicles get stolen. At least, not in Arizona. Or any state that borders on Mexico right now, I would guess. Stolen vehicles are basically untraceable, so when Mexico's drug lords need to move contraband, or kidnap/murder/rape someone, they steal a vehicle to do it. Large trucks and SUVs are routinely stolen from our secured parking lots where I work (about one a month) while the Porches, 'Vettes, and Ferraris seem to be relatively immune. Even my Ducati, which could be easily tossed into the bed of a pickup truck by two people in about two seconds has been ignored, while the Hummers and Escalades I park next to keep disappearing.
Re:what will they do with stolen cars? by Christian+Henry · 2012-01-13 06:44 · Score: 1

The full tank of gas is a payoff to the owner to keep his mouth shut.
Worked beautifully, I see. :-)
Re:what will they do with stolen cars? by Garybaldy · 2012-01-14 10:18 · Score: 1

Really flame bait. FUCKING PRICKS
Re:what will they do with stolen cars? by Garybaldy · 2012-01-14 10:23 · Score: 1

Like i said people like you want criminals put away for life. No matter how serious or minor the crime. It does not mater that our system does not work. that we have more people in jail both in numbers and as a percentage of any country that keeps records. That we have one of the highest recidivism rates of any country on the planet.
So i guess i am an apologist. I am sorry our system is so fucked up.
Re:what will they do with stolen cars? by Raenex · 2012-01-14 10:47 · Score: 1

I don't want them in jail for life, but I don't think "joyriding" is a minor offense and that it should be treated the same as stealing a car, and yes a felony. Don't steal shit, especially expensive shit that's the personal property of others.
Re:what will they do with stolen cars? by Garybaldy · 2012-01-14 11:05 · Score: 1

I understand the value of a car. Instead of having the guilty person pay restitution for any damages. We prevent them from getting a decent job the rest of thier life. That is what felonies really mean.
Instead of them being able to turn their life around. We punish them with burger flipping for life. A misdemeanor at least allows them to turn their life around. Felonies used to be reserved for violent crimes. Now its used for amy politicians need to look tough on crime. Because he is to lazy to do what needs to be done.
Re:what will they do with stolen cars? by Raenex · 2012-01-14 11:16 · Score: 1

Fair enough, that's a good point -- if it works in practice. Ultimately I want solutions that work the best.

Windows PC? by Anonymous Coward · 2012-01-12 07:37 · Score: 1

What a stupid fucking statement about Windows PC. What is that even supposed to mean? How is a modern car comparable to a computer running Windows? What version of Windows are we talking about here?

Re:Windows PC? by alen · 2012-01-12 07:41 · Score: 2

wonder if it has active directory connectivity? that would be so cool to add my car to the company's AD forest
Re:Windows PC? by kiwimate · 2012-01-12 07:45 · Score: 4, Insightful

It's a stupid flamebait analogy. The summary goes like this
* Windows PCs are as secure as a piece of tissue paper (LOL, for teh win!)
* Cars with their increasingly computerized systems are now becoming vulnerable to hacking.
* Windows PCs are vulnerable to hacking.
Re:Windows PC? by SQLGuru · 2012-01-12 07:47 · Score: 3, Insightful

The concept is that electronicly secured cars become wide-spread and common. It was why Windows PCs were attacked with viruses first. Now that Mac is more common, you see more attacks against them. It's why you see malicious Android apps. Soon, you'll start seeing malicious car apps......
It's all about wide spread opportunity. You need a lower percentage of successful attacks as the number of targets increases.
Re:Windows PC? by Capt.DrumkenBum · 2012-01-12 07:50 · Score: 2

Do that and when you leave the company, suddenly you can't start your car. :)

--
If I were God, wouldn't I protect my churches from acts of me?
Re:Windows PC? by Anonymous Coward · 2012-01-12 07:54 · Score: 3, Funny

We had car analogies for computers, now we have computer analogies for cars.
Re:Windows PC? by garyebickford · 2012-01-12 08:34 · Score: 1

IIRC Ford at least has a cooperative agreement with Microsoft and has shown cars with (among other things) automatic updating of your music into your car, so yes it might well be running some form of Windows. The increasingly prevalent and probably I-fear-soon-to-be-required OnStar or equivalent is basically a cellular modem connection, which can do almost everything to the car but steer.
And the average car has had more computing power than most desktop PCs for ten years or so. I read somewhere several years ago that the 2000 Cadillac had five Pentium-class CPUs. When you step on the gas, all you are doing is telling the car you want to go faster. When you start your car, you may notice that all the dashboard dials (speedo, etc.) will all go through a calibration cycle where the pointy arrow swings all the way from off to max. That's the CPU that drives the controls getting itself situated.
All in all, the car folks have done a pretty good job of making everything virtual, while maintaining the same user interface as a fiction so few people notice any difference.

--
It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
Re:Windows PC? by DarkOx · 2012-01-12 08:37 · Score: 1

Sounds nice that way HR can tell you IT department they have to enforce the GPO that does not let anyone go over 65MPH.
Can't wait.

--
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
Re:Windows PC? by grcumb · 2012-01-12 09:18 · Score: 1

What a stupid fucking statement about Windows PC. What is that even supposed to mean? How is a modern car comparable to a computer running Windows? What version of Windows are we talking about here?
Funny you should ask....
Dude, this is Slashdot. No car post is complete without a Windows analogy.

--
Crumb's Corollary: Never bring a knife to a bun fight.
Re:Windows PC? by vtcodger · 2012-01-15 16:25 · Score: 1

I know it's a radical suggestion, but you could try reading the linked pdf. It's really quite interesting.
IIRC Windows got sniped at because manufacturer's diagnostic software runs on Windows. So, all that needs to happen is that a compromised vehicle gets hooked up in the dealer's shop. The car then compromises Windows which then cheerfully reflashes the ECUs in every car it is subsequently hooked up to.
If it will make you feel better, Unix also got criticized because some ECUs ship with live Telnet interfaces and tools like vi, nc, ftp, etc available.

--
You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey

why is the CD player on the same network? by Trepidity · 2012-01-12 07:39 · Score: 5, Insightful

It's not clear to me why the CD player should even be on the same network as the engine-related microcontrollers.

--
10 PRINT CHR$(205.5+RND(1)); : GOTO 10

Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 07:41 · Score: 1

Because car designers are not network engineers.
Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 07:45 · Score: 5, Informative

Sometimes the electronics to control certain parts of the car are in the stereo to keep you from upgrading the stereo. Ford, for example, uses strange oval shapes to keep you from replacing their crappy stereo. Chevrolet in the case of my old Monte Carlo put the door chime and some of the interior light controls in the stereo. The work-around Best Buy did in my car was to move the original stereo to the glove compartment and leave it connected to everything but the speakers. In my wife's Lexus, the car wouldn't even start without the radio. I gave-up on upgrade the stereo in it. Car makers these days go to great lengths to make sure you do not get good sound in your car and buy any upgrades from them.
Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 07:48 · Score: 1

FTFA:
Modern automobiles are controlled by a heterogeneous
combination of digital components. These components,
Electronic Control Units (ECUs), oversee a broad range
of functionality, including the drivetrain, brakes, lighting,
and entertainment. Indeed, very few operations are not
mediated by computer control in a modern vehicle (with
the parking brake and steering being the last holdouts,
though semi-automatic parallel parking capabilities are
available in some vehicles and full steer-by-wire has been
demonstrated in several concept cars). Charette estimates
that a modern luxury vehicle includes up to 70 distinct
ECUs including tens of millions of lines of code [5]. In
turn, ECUs are interconnected by common wired net-
works, usually a variant of the Controller Area Network
(CAN) [12] or FlexRay bus [8]. This interconnection
permits complex safety and convenience features such as
pre-tensioning of seat-belts when a crash is predicted and
automatically varying radio volume as a function of speed.
Re:why is the CD player on the same network? by 427_ci_505 · 2012-01-12 07:55 · Score: 3, Informative

Depends on the car. The Corvette, for example, has three variants on the engine, each variant costing a different amount of money.
Re:why is the CD player on the same network? by Ouchie · 2012-01-12 08:08 · Score: 3

The reason why the Car Stereo is on the same network is because too many people were buying cars with no stereo or the basic stereo then going to after market shops where they could get a much better stereo for the same amount of money. Manufacturers decided that to reduce this they would just make the car stereo a required part for the whole system to work. It gives you a good reason to pay $1200 for the stereo upgrade which we know isn't worth $600.

--
"Of all the things I've lost, I miss my mind the most." ~Ozzy Osborne
Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 08:10 · Score: 5, Informative

You have a great point about Chevrolet. I install stereos for a living, and Corvettes have some very creative protections against replacing the stereos. GM really wants you to have to suffer with the absolutely horrible Bose stock stereo. GM uses non-standard line out voltages in the Corvette so you can't connect the head unit to a real amplifier. Also, they place the amplifiers in the door which doesn't leave you with enough room to put even a tiny Alpine amp in the door even if you ignore the air flow problems. A real amp will fit under the seat but only if you have one of the few Vettes without power seats. In addition they use proprietary thin woofers in the doors which, of course due to physics, sound horrible. The speakers are a weird and complicated size so you have to fabricate mounting brackets. Also the speakers are a nonstandard impedance so you can't drive them with a standard car amp. Even with all of that work, GM decides to take the door and key chimes away from you if you replace the headunit.
What all of that means is if you want to upgrade or repair any single component, you must replace the entire system.
Re:why is the CD player on the same network? by Lumpy · 2012-01-12 08:17 · Score: 3, Informative

nope.
It's on the bus to listen for vehicle speed so the active volume can go up and down. Advanced one spit out channel and RDS data for the HUD. there is zero possibility to send out a "lock up the breaks" command from the car stereo into the CANBUS unless you rewrite the stereo's firmware first. and that is not gonna happen, There are a LOT of guys looking to hack GM and Ford satnav systems to get past the damn CANBUS VIN lock. They have had ZERO success in the past 5 years.

--
Do not look at laser with remaining good eye.
Re:why is the CD player on the same network? by PseudonymousBraveguy · 2012-01-12 08:17 · Score: 2

Well, it is usually on a different (layer 2) network, but usually there is a gateway routing messages between the two. Why? Because the CD player is embedded in the entertainment system, and that system displays information from the engine (e.g. current mileage), or you may be able to configure your engine via the entertainment system (like switching your engine and gearbox to "sport" mode). However, the gateway does not blindy route any message to any network, there is usually a fixed configuration which message should be routed to which network.
Nevertheless, most development in the field is centered around safety, and not focused at security, so I'm not that surprised that vehicular networks are hackable.
Re:why is the CD player on the same network? by h4rr4r · 2012-01-12 08:19 · Score: 2, Insightful

It's a vette, why does it even have a stereo?
Re:why is the CD player on the same network? by DarkOx · 2012-01-12 08:20 · Score: 1

Because that is how they implement the "Music gets louder, when the engine is turning more revs and making noise" feature.
Consumers want wizbang features like stereo's that auto adjust volume, they don't care about security. They might not even really care about safety. Oh they'll demand safety "features" like 60 different airbags, but the idea that a software bug or interconnect problem introduced as a result of the needless complexity in some vehicles could cause their breaks to malfunction just is not real to them. Well its not real to them until they or someone they know slams into something.

--
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
Re:why is the CD player on the same network? by Lumpy · 2012-01-12 08:25 · Score: 5, Interesting

Really? I seem to find it different.
Just helped a friend with his 2010 Vette 2 months ago, dingy thingy replacements are available at scosche for less than $25.00 so all your chimes are retained. Steering wheel controls are also easily adapted with a $79.00 box.
speaker upgrades are worthless as the Vette with premium sound that has the amps on the backs of the speakers sound better than any of the aftermarket stuff, speaker placement in the vette is crap anyways, $300 each drivers will not sound any better in that car, but it's easy to do with adapter plates from..... Scosche, that place again.
as for a "real amp" almost nobody puts in a 10,000 watt Rockford Phosgate anymore. replace the head unit with the new kenwood stanav one, hooked into the existing wiring for the speakers and simply removed the speakers and disconnected the "premium sound" amps.
All done. Anyone that has done car stereos in the past 2 years knows this, you dont have to " replace the entire system" not by a long shot.

--
Do not look at laser with remaining good eye.
Re:why is the CD player on the same network? by Fahrvergnuugen · 2012-01-12 08:26 · Score: 2

Because the CD player connects to the steering wheel controls which connects to the ECU to set cruise control for your drive by wire throttle plate.

--
Kiteboarding Gear Mention slashdot and get 10% off!
Re:why is the CD player on the same network? by BitZtream · 2012-01-12 08:27 · Score: 1

So that the emergency bell/check engine ding on your engine plays through your speakers when you're blasting the radio too loud to hear it otherwise.
Thats just an example that came to me off the top of my head as I've seen it happen. I'm sure there are plenty more.

--
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
Re:why is the CD player on the same network? by BitZtream · 2012-01-12 08:31 · Score: 4, Informative

They aren't 'put in the stereo to intentionally make it harder' as you imply, but when you disconnect the stereo's internal bus, you do fuck up a portion of the cars' network.
GM really doesn't give a fuck if you put in a different stereo after you bought the car ... YOU ALREADY PAID FOR THE STEREO IN THE CAR.
Replacing the stereo is also rather trivial, you just need an interface kit that will interface your stereo with the cars data bus. These interface kits are well known (Best buy sells the damn things) and fit pretty much any car on the planet and make it work with any kind of stereo from old school analog systems to fully modernized systems with blutooth phone audio relays and text output to the display.
Its not the car makers that don't know what they are doing in your case, its you and best buy.

--
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
Re:why is the CD player on the same network? by BitZtream · 2012-01-12 08:35 · Score: 5, Informative

Wow, you are one of the worst 'stereo installers' I have ever fucking met.
You do realize there is an interface kit for every GM vehicle on the planet that will make it 'normal' or 'industry standard', right? Give you standard line outs, standard speaker outs, will still make sure that you get all your interface sounds piped through your speakers like door chimes and warning bells, blinker clicks, ect ...
Whats great is you're talking about them using weird speakers shapes in places where ... NORMAL SHAPES WON'T FIT.
What all of this means is that you don't actually know what you're talking about.
GM only has 2 or 3 interface busses for the dash electronics in their cars and there are interfaces for all of them. Get a clue about your job.

--
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
Re:why is the CD player on the same network? by tompaulco · 2012-01-12 08:35 · Score: 1

adjust volume to compensate for engine noise
But this introduces an unnecessary step and an assumption. The system guesses how loud the road noise is by using the current engine RPM. Then the radio system gets loader based on that guess.
Instead, they could completely isolate the stereo from the rest of the vehicles systems, and use a microphone to MEASURE the ambient noise and raise the volume by the precise amount necessary. I had a car stereo that did this in 1989. There is no reason in this day and age to make a guess at engine noise from the car's data rather than directly measuring it.

--
If you are not allowed to question your government then the government has answered your question.
Re:why is the CD player on the same network? by garyebickford · 2012-01-12 08:36 · Score: 4, Funny

To entertain the arm candy.

--
It's easier to be a result of the past, but more fun to be a cause of the future! http://www.spacefinancegroup.com/
Re:why is the CD player on the same network? by BitZtream · 2012-01-12 08:41 · Score: 1

Uhm, this isn't Windows, thats not how it works.
The 'high performance' package from an ECU perspective is almost certainly nothing more than torque curve modifications to 'not hold the engine back' at certain RPM ranges that would make it hard for a dipshit off the street to drive. My car is one of those cars.
The other $4550 worth of the cost however typically goes to suspension or actual engine upgrades.
Unlike software were including extra, but disabled functionality has essentially no cost, in cars the more powerful engine has several costs. It costs more to manufacture itself, it requires different drive line components for supporting it and all sorts of things. In short, they don't do what you're referring too because its not cost effective to sell the bigger more powerful engine at a reduced price with an ecu tweak to ton it down. Its still far cheaper to put in a smaller engine.
Being that they work on 10 week cycles when producing cars, its not like they have to keep all sizes of engine in stock. This 10 week cycle we make big engine cars, next cycle medium, and the one after that is cleanup cycle or whatever.
If you think everyone has same engine you've never looked under the hood. All the corvette performance changes involve different engines with physically different configurations.

--
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 09:04 · Score: 2, Funny

To give you something to listen to when you're waiting for the tow truck.
Re:why is the CD player on the same network? by AJH16 · 2012-01-12 09:09 · Score: 1

Ironically, to try and keep your stereo from being stolen. Good stereos used to be stolen a lot so they started tieing them to the VIN which is supplied by the ECM. Unfortunately, they have now started figuring out ways to use that connection to hack in to the ECM. Oops..!

--
AJ Henderson
Re:why is the CD player on the same network? by Archangel+Michael · 2012-01-12 09:29 · Score: 2

OR
Better yet, use the Microphone to pick up the Ambient noise, and generate a counter wave / noise cancellation in the stereo output to create a sound proof bubble around the cabin, making the ride even quieter than naturally occurring.

--
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
Re:why is the CD player on the same network? by kimvette · 2012-01-12 09:50 · Score: 2

Every marque with the BOSE system will have the same problem for line-out voltage and impedance issues. For those systems all you need is a line-out converter.
Amplifier installation? Unless you're installing a monstrous amp, installing an amplifier in a Corvette is simple.
Speaker installs? Okay, slightly more difficult, but no more difficult than any other sportscar.
System sounds? Not a problem - multiple solutions exist for that. Just be glad the head unit in that car doesn't act as the hub for the CAN bus. The Corvette is far from the most complicated or challenging auto sound vehicle.

--
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
Re:why is the CD player on the same network? by godel_56 · 2012-01-12 10:25 · Score: 2

The reason why the Car Stereo is on the same network is because too many people were buying cars with no stereo or the basic stereo then going to after market shops where they could get a much better stereo for the same amount of money. Manufacturers decided that to reduce this they would just make the car stereo a required part for the whole system to work. It gives you a good reason to pay $1200 for the stereo upgrade which we know isn't worth $600.
Similar to printer manufacturers and ink jet cartridges.
Re:why is the CD player on the same network? by mijxyphoid · 2012-01-12 11:38 · Score: 2, Interesting

nope.
It's on the bus to listen for vehicle speed so the active volume can go up and down. Advanced one spit out channel and RDS data for the HUD. there is zero possibility to send out a "lock up the breaks" command from the car stereo into the CANBUS unless you rewrite the stereo's firmware first. and that is not gonna happen, There are a LOT of guys looking to hack GM and Ford satnav systems to get past the damn CANBUS VIN lock. They have had ZERO success in the past 5 years.
Ive been working on this for the past couple of months, and I have had success.
(Search for VE Commodore HVAC Radio Hacking on google).
Simply grap a SOP Clip, and an EEPROM programmer.
The VIN number is stored as plain text on the Radio, Cluster, BCM, and a few other modules....
The main reason why Manufacturers have been integrating the radio in to the vehicle, is because the radio is no longer just a radio, its an info/tainment center.
HVAC controls, Sat-Nav, Park Assist, Reverse camera, radio, Bluetooth Audio connectivity, Video in Motion prevention, etc....
On GM vehicles, there are two separate buses, the high speed GM LAN, which is used for critical stuff such as engine, transmission, brakes, stability management, etc....
Then there is the low speed BUS which is used for stuff like HVAC, Radio, Instrument Cluster, Body Electronics, etc.
What the article is trying to point out is that FORD for example, uses wifi to program its Ford SYNC (Windows CE) system at the factory.
Whether a wifi module is plugged in on the line, and removed later is anyones guess. However, all the Low speed (Non critical stuff) is usually accessible via the low speed can bus, such as locking/unlocking doors, and remote starting of the car (via the Body Electronics Modules) etc.....
Re:why is the CD player on the same network? by Anonymous Coward · 2012-01-12 12:26 · Score: 1

There are some very good reasons. In many current luxury cars, if you get in an accident bad enough to pop the airbags, the main computer will unlock the doors, roll down the windows, shift into neutral or park, shut down the engine, turn off the stereo, activate the emergency flashers, cut main power as if you had turned off the key in an older car, call 911 if you have OnStar or similar, etc., etc. If the stereo, windows, flashers, etc. aren't on the same bus as the main computer, none of this can happen.
In more sedate circumstances, let's say your engine computer needs a firmware update. It would probably save a boatload of money if the dealer could shove a special CD in with the firmware image into the CD player and POOF. If you save enough money, it doesn't matter if it makes the car slightly more vulnerable to theft. The savings will cover the lawsuits from the couple of people with enough means to bring a suit against the manufacturer.
Re:why is the CD player on the same network? by Grishnakh · 2012-01-12 15:53 · Score: 1

Doesn't work. The acoustics of a car cabin are rather complicated, and you don't know where a person's head will be. You'd end up with one person hearing less noise and one hearing double or triple the volume. There have, I believe, been some cars that have used active noise cancellation, but only for very low-frequency sounds, because the wavelength is very long. You can't use it for higher frequencies because of the short wavelength. You can, however, do a lot better if you build this technology into headphones, since the distance between your ear and the speaker is pretty much fixed in that case, but it's illegal to drive while wearing headphones.
Re:why is the CD player on the same network? by tehcyder · 2012-01-13 02:48 · Score: 2

Yay! Another computer analogy for cars. I love this thread, it's messing with some of the basic tenets of reality.

--
To have a right to do a thing is not at all the same as to be right in doing it
Re:why is the CD player on the same network? by swalve · 2012-01-13 03:44 · Score: 1

Agreed. The ECU might be the same with just a different config code burned into it, but the motor is different in every car I know of.
Re:why is the CD player on the same network? by StefanSavage · 2012-01-13 06:26 · Score: 1

nope.
there is zero possibility to send out a "lock up the breaks" command from the car stereo into the CANBUS unless you rewrite the stereo's firmware first. and that is not gonna happen,
I'd admit it is surprising, but you're wrong on this one. This is in fact one of the things we are able to do.
- Stefan
Re:why is the CD player on the same network? by Airline_Sickness_Bag · 2012-01-13 10:32 · Score: 1

It's a Vette, not an Audi
Re:why is the CD player on the same network? by vtcodger · 2012-01-15 16:47 · Score: 1

The obvious answer -- and one selected by many millions of Americans -- is never to buy a GM vehicle. GM sold me a really badly designed and crafted vehicle 50 years ago, and I resolved never to buy another car from them. Based on occasional rentals and friend's experiences with GM's cars, it's one of the wiser decisions I've made in life.

--
You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey

Figured this would have happen sooner by AlienSexist · 2012-01-12 07:39 · Score: 1

With the capability for devices to do remote start, or ONSTAR to do things like remotely unlock your doors, as well as wireless keyfobs. I figured we'd already have people with devices that can fake these signals to gain access to and start automobiles. Much like how there exist DIY RFID readers where you can just walk through a crowd and read all their passport RFIDs and so on.. CD, iPod, Bluetooth, and Cellular attacks. That's clever too.

Re:Figured this would have happen sooner by Lashat · 2012-01-12 08:08 · Score: 2

The reason this has not happened sooner is that remote start and auto-unlock are not the only features of OnStar. Key-fob/rfid cloning exists and is not prohibitively difficult. Remote engine kill makes initial get-away more difficult outside of a very small window of time. While vehicle tracking can find the vehicle after it has disappeared from the owners line of sight. Plus, exposes the chop shop location to the authorities.
Until it is possible to cheaply, easily, and quickly block/disable both GPS and cell signals to/from the vehicle after the theif comprimises the it, this high barrier to auto-theft will remain.
Criminals are VERY quick to change their m.o. in the face of tougher security. With many police forces adopting "no reponse with out confirmation" to burlgar alarms. It is much easier to burgle commercial and residential property.
Along the same vein: Watch an episode of "bait car". (one is all you really need) Where the police leave a car in a opportunistic way for a would-be theif to capitalize on the seemingly abandoned car.

--
For every benefit you receive a tax is levied. - Ralph Waldo Emerson
Re:Figured this would have happen sooner by CanHasDIY · 2012-01-12 08:27 · Score: 1

The reason this has not happened sooner is that remote start and auto-unlock are not the only features of OnStar. Key-fob/rfid cloning exists and is not prohibitively difficult. Remote engine kill makes initial get-away more difficult outside of a very small window of time. While vehicle tracking can find the vehicle after it has disappeared from the owners line of sight. Plus, exposes the chop shop location to the authorities.
Disagree; On-Star's remote capabilities are easily circumvented in most vehicles by removing the relay that powers the CMDA modem. Also taking into consideration that On-Star is a GM-specific product, and GM is not the sole auto maker in the world, the concept that their tracking capabilities are the main reason car theft is in decline is dubious at best.

Personally, I would more likely attribute the decline to a deepening cost vs benefit ratio; a lot of folks have no compunction about breaking a $300-400 computer/smartphone/whatever in the process of reverse engineering it, since worst come to worst, they can most likely replace the device in a paycheck or two; however, most hackers I know are a bit wary of taking on a automobile that A) costs as much or more than most people's annual salary, and B) also happens to be their only means of transportation.

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese
Re:Figured this would have happen sooner by Cramer · 2012-01-12 08:54 · Score: 2

OnStar is a GM brand. I'm told the Toyota/Lexus Enform/Safety-Connect system is run by OnStar. (on verizon's network.)
If you're going to boost a car thusly equiped, you'd be wise to remove or disable the thing FIRST. When manufacturers get wise and link the module into the anti-theft logic -- meaning the car won't work without it -- simply disable the radio/antenna. Not being able to start your car because it cannot see T-Mobile's network (for example) would never be accepted by customers.
Re:Figured this would have happen sooner by Lashat · 2012-01-12 09:34 · Score: 1

I guess that our definition of "easy" is different. Most OnStar boxes that I have seen reside behind truck/cargo area panels. These require a decent amount of effort to remove or even destroy to rip out. Once you have access to the box then you can just pull out the antenna or cut the modem wire.
However, this does NOT disable the GPS tracking ability.
Easy to me would be a portable and concelable jammer of cell and GPS signals.
The key to most successful auto-theft is to look like the owner getting into the car, start it and get out of the area. NOT digging around in the trunk/cargo area looking suspicious.
As far as my dubious concepts, here are two links for support.
GPS leads to chop shop. (there were many of these if you search)
http://www.canada.com/edmontonjournal/news/story.html?id=68129266-9628-4bdf-a7f8-52265fdaa318
FBI report states that technology has lead to a decline in auto-theft
http://news.consumerreports.org/cars/2011/09/fbi-reports-a-decline-in-auto-theft-in-2010.html
Your personal attribution of the deepening cost vs benefit ratio somewhat applies. If you examine the cause of that "deepening" wouldn't it be all of the technological factors that previously discussed?

--
For every benefit you receive a tax is levied. - Ralph Waldo Emerson
Re:Figured this would have happen sooner by CanHasDIY · 2012-01-12 10:01 · Score: 2

OnStar is a GM brand. I'm told the Toyota/Lexus Enform/Safety-Connect system is run by OnStar. (on verizon's network.)
Duly noted.

If you're going to boost a car thusly equiped, you'd be wise to remove or disable the thing FIRST. When manufacturers get wise and link the module into the anti-theft logic -- meaning the car won't work without it -- simply disable the radio/antenna.
For the record (and the benefit of my fellow paranoids), you can actually request this equipment be disabled for you by the dealer prior to purchase, or by the owner if they know where to look. Of course, this is a moot point for those who actually intend to pay for and use the service, but personally I would never subscribe to a service that can arbitrarily disable my vehicle without my permission... among other, privacy related issues.

Not being able to start your car because it cannot see T-Mobile's network (for example) would never be accepted by customers.
Yea... I remember saying something similar when GPS devices started becoming ubiquitous in cell phones... 'surely no one will accept a phone with a built in tracking device!'

Ah, the naivety of youth..

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese
Re:Figured this would have happen sooner by CanHasDIY · 2012-01-12 10:25 · Score: 1

I guess that our definition of "easy" is different. Most OnStar boxes that I have seen reside behind truck/cargo area panels. These require a decent amount of effort to remove or even destroy to rip out. Once you have access to the box then you can just pull out the antenna or cut the modem wire.
However, this does NOT disable the GPS tracking ability.
Much easier to just remove the relays which power the On-Star/GPS devices, which are often housed on an easily accessed panel under the hood or dashboard. Instructions for disabling the aforementioned systems are prolific on the 'nets, or you could just ask your friendly neighborhood auto tech to disable them for you.

Fortunately, we don't (yet, hopefully) live in a world where the secret government places hidden trackers/disablers in every car sold in the country.

Easy to me would be a portable and concelable jammer of cell and GPS signals.
Except that you might as well stick a big "I'M BREAKING THE LAW" flag in the window. Cell jammers are illegal and highly noticeable ('hey, why is there a dead spot surrounding that Tahoe over there?'); disabling non-safety systems on a car is not.

Your personal attribution of the deepening cost vs benefit ratio somewhat applies. If you examine the cause of that "deepening" wouldn't it be all of the technological factors that previously discussed?
To some degree, yes, just as the economic flux of the past 40 years has played its part in driving costs up and keeping wages flat.

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese
Re:Figured this would have happen sooner by Cramer · 2012-01-12 10:46 · Score: 1

Heh. The key there... a cellphone is a tracking device. Granted, tower triangulation isn't going to tell what seat you're in.

yo. by grub · 2012-01-12 07:40 · Score: 4, Funny

So the other day I was on the bus and I saw this hot woman driving a car. I pulled out the iPhone, SSH'd into home and ran nmap on her license plate.

LOL, stupid woman didn't notice her gas cap was left off from the last fill but nmap caught it. Used nc to push 'fire.jpg' into her tank and she blew up.

True story, fucker.

--
Trolling is a art,

Re:yo. by The+Grim+Reefer · 2012-01-12 08:34 · Score: 1

So the other day I was on the bus and I saw this hot woman driving a car. I pulled out the iPhone, SSH'd into home and ran nmap on her license plate. LOL, stupid woman didn't notice her gas cap was left off from the last fill but nmap caught it. Used nc to push 'fire.jpg' into her tank and she blew up. True story, fucker.
So are you saying she was "hot" prior to blowing up, or are you being literal and meant afterward? Just wondering.
Re:yo. by antdude · 2012-01-12 09:25 · Score: 1

Why would you want to blow up a hot woman? :(

--
Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
Re:yo. by SleazyRidr · 2012-01-12 10:33 · Score: 1

Seriously, wtf is grub on?

--
Is 1563649 a prime number?

Car security has been plummeting for ages by Riceballsan · 2012-01-12 07:43 · Score: 3, Informative

In many many ways we've been opening more security holes in our cars as time progressed, the wireless unlockers. Even if we pretend that wireless isn't heaven to sniff and spoof. People leave their keys out in all sorts of public places, not everyone locks them up at the gym, most people leave them unattended at a waterpark or beach etc... before wireless that was reasonable, no-one is going to steal my keys because there are 500 cars in the parking lot, nobody can try each one. now with wireless, if you steal someones keys, you can just walk around the lot and push a button to make it beep and find out where the car is.

Re:Car security has been plummeting for ages by drinkypoo · 2012-01-12 07:47 · Score: 1

Yeah, this is what I came here to comment on... you can go to dealextreme and buy a couple of unlocking tools, and anyone can get it. Probably not too much harder to find more contemporary tools.

--
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Re:Car security has been plummeting for ages by AJH16 · 2012-01-12 09:26 · Score: 1

I never understood why they don't implement more secure wireless keyfobs, or maybe some do. It is easy to make it so wireless isn't heaven to sniff and spoof. Simply make a time driven rotating key based on a shared AES key. Make the lock and unlock code different and you effectively have a secure, spoof proof system. When I get out of my car, I only transmit lock so you can't unlock even during the available window that the code is good for. Similarly, when I return to my car, I'm in it for the period of time that the unlock is good for so it does you no good. You could even use the insertion of the key in the car to allow for the clock to be kept in very close sync with a growing tolerance if it has been a while since the car was used.

--
AJ Henderson
Re:Car security has been plummeting for ages by toddestan · 2012-01-12 15:43 · Score: 1

Even with 25 tries, you should be able to cover a decently-sized parking lot.
Re:Car security has been plummeting for ages by tomboalogo · 2012-01-13 02:32 · Score: 1

"I never understood why they don't implement more secure wireless keyfobs,"
Because you've never worked in the automotive electronics industry (I do). It ain't pretty!!

Wrong demographic by prichardson · 2012-01-12 07:44 · Score: 2

I seriously doubt this will have much effect on car thievery. A jimmy and hotwiring are things pretty much anyone can do. On the other hand, hacking a car's PC is not a skill generally held by people who have an actual desire to steal cars. I expect a few very expensive cars will be stolen via high-tech means, but I wouldn't expect this to cause a noticeable change on cat theft rates for non luxury cars.

--
Help I'm a rock.

Re:Wrong demographic by DMUTPeregrine · 2012-01-12 07:50 · Score: 5, Insightful

I think you're (somewhat) wrong. Initially it won't mean much, but just like pre-packaged malware suites for credit card fraud (ZeuS being the biggest example) point-and-drool interfaces for car theft will be made eventually.

--
Not a sentence!
Re:Wrong demographic by 427_ci_505 · 2012-01-12 07:57 · Score: 1

Even non luxury cars come with things like bluetooth nowadays. The attack vectors are present.
Re:Wrong demographic by heckler95 · 2012-01-12 07:59 · Score: 2, Insightful

The first guy to hack a car's PC needs to be skilled. Turn that into a black-market android app and all of a sudden the middle-school dropout who had trouble learning how to jimmy or hotwire can steal a car with the swipe of a touchscreen. It's just a matter of time.
Re:Wrong demographic by Lumpy · 2012-01-12 08:13 · Score: 2

no it's not.
there is ZERO connection from the BT to the car's operational CANBUS.

--
Do not look at laser with remaining good eye.
Re:Wrong demographic by prichardson · 2012-01-12 08:28 · Score: 1

I'm not saying that the attack vector isn't present, I'm just saying it's not worth it. Someone with the skills to steal a car that way isn't going to bother to make $5000 (at most) selling a stolen car for parts when they could make that in a week at a legitimate job (that they can get with the skills required to steal said car in said fashion).
Now, stealing a crazy-expensive car is another matter entirely.

--
Help I'm a rock.
Re:Wrong demographic by CanHasDIY · 2012-01-12 08:39 · Score: 1

Ignoring, for a moment, that most-if-not-all automotive computer systems are proprietary and thus will vary from manufacturer to manufacturer, I think it's more an issue of funding. If cars cost what computers do, this issue would have come to a head years ago.

Considering cost, it seems to me that hacking of automobile computer systems will, for now, be the exclusive domain of researcher organizations and vast criminal empires... to that end, imagine the havoc that could be wrought if, say, the Zeta's got a hold of one of ICE's Suburbans and managed to reverse engineer it's systems...

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese
Re:Wrong demographic by gl4ss · 2012-01-12 08:58 · Score: 1

no it's not.
there is ZERO connection from the BT to the car's operational CANBUS.
when the entertainment unit is made integral part of the onboard computer systems then uh.. yeah, there is direct connection. why would a car company do that? well, two reasons: to make it more of a bitch to go with aftermarket 40 bucks radios so you'll have to buy their most expensive in car entertainment package when you buy the car and the second reason is simply cutting costs and reducing the number of cpu's on the car.

--
world was created 5 seconds before this post as it is.
Re:Wrong demographic by Cramer · 2012-01-12 09:05 · Score: 1

Well, COULD do... back in the 80's. Starting a car by touching the right two wires in the igition harness ended around 1989 with the last of the carbureted cars. (I'm told that was a Subaru Justy.) A carbureted car could be started that way. Cars with electronic ignitions have more wires. And modern ones have anti-theft devices.
Re:Wrong demographic by harl · 2012-01-12 09:07 · Score: 2

You're missing the point.

They don't have to. Does every criminal have to take apart a car door and figure out how to make a slim jim before they can start stealing cars?

One group will discover an exploit and make tools to automate the process. They will then spread them so people without skills to discover the exploit can exploit the exploit.

I don't have the skills to break DVD encryption but I can get the tools to do it in 5 minutes.

--
I find being offended by me offensive.
Re:Wrong demographic by Jeng · 2012-01-12 09:30 · Score: 1

to that end, imagine the havoc that could be wrought if, say, the Zeta's got a hold of one of ICE's Suburbans and managed to reverse engineer it's systems

All though it would be handy for the Zeta's to be able to disable the ignition at will of an ICE Suburban, I think the greater threat would just be the Zeta's using a system to see where radio transmission are coming from.
If ICE never sees the Zeta's then ICE will probably never know that the Zeta's have the capability, but if you knock out the ICE's vehicles they will react to that immediately and make sure that vector no longer works.
Best defense, no be there.

--
Don't know something? Look it up. Still don't know? Then ask.
Re:Wrong demographic by phoenix321 · 2012-01-12 09:38 · Score: 4, Interesting

Remember Stuxnet.
Covert assasination anyone?
Implant a well-disguised piece of trojan code inside an ECU of opportunity.
Have it triggered at a specific speed, at local nighttime. Disable brakes, lights, airbags and stomp on the accelerator. If any crash is detected, quickly recover the firmware to an original, untampered backup that was stored away somewhere beforehand.
Crash investigators will find nothing but "reckless speeding" to be the cause.
Re:Wrong demographic by lucifuge31337 · 2012-01-12 09:51 · Score: 2

Well, COULD do... back in the 80's. Starting a car by touching the right two wires in the igition harness ended around 1989 with the last of the carbureted cars. (I'm told that was a Subaru Justy.) A carbureted car could be started that way. Cars with electronic ignitions have more wires. And modern ones have anti-theft devices.
God dammit I hate when people on /. talk about cars. You are just one of the many who are so wrong you are even embarrassing ME .

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by Lumpy · 2012-01-12 10:01 · Score: 2

Says the man that knows NOTHING about car electronics.
CANBUS is a series of messages. you cant send "start the car" into bluetooth and have it seen on the CANBUS as a valid message as it will be wrapped in a "audio system" preamble and container.
come back when you have a clue as to what you are talking about.

--
Do not look at laser with remaining good eye.
Re:Wrong demographic by tomhudson · 2012-01-12 10:06 · Score: 1

... which is why you used a dent puller (or a big screwdriver and a hammer) to just remove the key barrel and insert a screwdriver, and turn the switch on.
Or if you had the misfortune of driving certain Chryslers, the pin at the bottom of the barrel that turns the contact pad would snap off in normal use, and you could just remove the whole barrel by hand, no tools required (happened to me at a gas station - I filled up, went to turn the ignition on, and it spun around and around and around with no effect. Had to pull out the barrel and use a screwdriver to turn the contact pads to the right position).
Re:Wrong demographic by GameboyRMH · 2012-01-12 10:22 · Score: 1

Wrong, most EFI cars can be started the same way, there's nothing about EFI itself that makes it different.

--
"When information is power, privacy is freedom" - Jah-Wren Ryel
Re:Wrong demographic by Cramer · 2012-01-12 10:42 · Score: 1

You won't believe it until you see it with your own eyes -- in person. (you're doing exactly what the ignition switch does, just without the key... turn the ignition on, pulse the starter.)
Re:Wrong demographic by lucifuge31337 · 2012-01-12 10:50 · Score: 1

You won't believe it until you see it with your own eyes -- in person. (you're doing exactly what the ignition switch does, just without the key... turn the ignition on, pulse the starter.)
And how does that make the car start? Never mind, I'll answer for you: it doesn't.

It has never been that simple, despite how many movies you have seen. Cars don't do anything without power to the ignition, ECU, and preferably the accessories. Yes, that means you need to wrap a bunch of wires together first to power them before the magical movie "hot wire" does anything more than spin the starter and uselessly crank the motor. Yes, even cars with carbs. Even car without ECUs and with mechanical fuel pumps. The only exception to this rule are some older mechanically injected diesels which you weren't likely to find even in the 80s unless you were trying to steal Mack R models.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by Cramer · 2012-01-12 10:57 · Score: 1

lol. A screw driver hammered into the side of the column is a dead giveaway. I had the switch housing (clamshell crimped together, really crappy) come apart in my old ford tempo. A few hours with a bag a zip ties...
It was even easier with even older cars that had the switch on the dash. Reach under the dash, one yank, and Bob's your uncle! *whistles innocently*
Re:Wrong demographic by tomhudson · 2012-01-12 11:18 · Score: 1

You don't have to LEAVE the screwdriver in the lock - once you turn it past the point where the pin breaks and the car starts, you can remove it. From then on, you can start the car with a nail file, a popsicle stick, or if it's REALLY cold, a Tootsie Roll.
Re:Wrong demographic by colinrichardday · 2012-01-12 11:54 · Score: 1

The old "we can't redirect that convoy because then the Germans would know that we broke Enigma" gambit.
Re:Wrong demographic by waives · 2012-01-12 12:54 · Score: 1

I have started my 1999 Corolla by yanking a connector out from behind the steering wheel and bridging things with paper clips. Wasn't able to figure out how to get the steering lock to release though.
Re:Wrong demographic by lucifuge31337 · 2012-01-12 12:58 · Score: 1

I have started my 1999 Corolla by yanking a connector out from behind the steering wheel and bridging things with paper clips. Wasn't able to figure out how to get the steering lock to release though.
I have no idea what this post is supposed to mean. Are you trying to say your 1999 Corolla needs only two wires bridged to start and run? If so, it's the only one in existence.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by waives · 2012-01-12 13:37 · Score: 1

You're making hotwiring a car out to be some extremely complicated thing. It's not, I was able to figure it out from scratch in 15 minutes of boredom, I'm pretty sure an accomplished car thief could do it in a matter of seconds.
Re:Wrong demographic by lucifuge31337 · 2012-01-12 13:46 · Score: 1

You're making hotwiring a car out to be some extremely complicated thing. It's not, I was able to figure it out from scratch in 15 minutes of boredom, I'm pretty sure an accomplished car thief could do it in a matter of seconds.
I think your reading comprehension is probably pretty poor if that was you take-away. I was arguing the simple fact that you don't just "spark two wires together" like in the movies and like the poster I responded two stated.

I work on auto electronics as a side job. This includes wiring race cars from scratch. I've got a better than average idea of how an automotive electrical system works. So, please, do try to argue facts with me if you want to keep this up. I can do it from rote memory while you google away at it.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by lucifuge31337 · 2012-01-12 14:03 · Score: 1

(There's a lot of amps in the ignition circuit... wouldn't want to touch that)
Seriously /. posters. Just stop it. This really is embarrassing to everyone.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by waives · 2012-01-12 14:30 · Score: 1

You're picking nits: ok, you don't spark two wires together, you spark 3-4 pairs of wires together. Not much difference.
Since I know for a fact that it's possible to start my car this way because I've done it, why don't you give your theories on why it's impossible?

And on the off chance you're not full of shit, can you tell me how I'd go about clearing the steering lock?
Re:Wrong demographic by lucifuge31337 · 2012-01-12 14:32 · Score: 1

Bullshit. Done it with a '79 datsun, a screwdriver, and the solenoid.
A 79 Datsun doesn't need power to an ignition coil? Did you forget to mention the part about it having a mechanically injected diesel motor in it?

This is really, really basic shit. No spark=no run. No voltage to the ignition coil=no spark. You can crank the starter all fucking day and the motor won't run.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by lucifuge31337 · 2012-01-12 14:37 · Score: 1

You're picking nits: ok, you don't spark two wires together, you spark 3-4 pairs of wires together. Not much difference. Since I know for a fact that it's possible to start my car this way because I've done it, why don't you give your theories on why it's impossible? And on the off chance you're not full of shit, can you tell me how I'd go about clearing the steering lock?
I seriously doubt you've done it, or you'd know that you aren't "sparking 3-4 pairs of wires together". You are bridging 12v (which you'll find somewhere in the harness) to the ignition, whatever other separated required systems are on the switch depends on the car, and possibly the accessories (but not necessary). Then you are "sparking" the starter solenoid "s" terminal lead to the bundle or some other 12v source.

And you "clear" the steering lock with a slide hammer. And then jam a flat head screwdriver into what is left and fuck the hot wiring, because you can just turn the ignition switch with the screwdriver. No wiring necessary.

--
Do not fold, spindle or mutilate.
Re:Wrong demographic by couchslug · 2012-01-12 15:09 · Score: 1

All you have to do to steal a car is pull up to it with a snatch truck, grab it with a wheel lift, and drive off down the street. You can disengage the parking brake later if you don't mind tire smoke for a bit.
Repo'ing cars isn't like on TV, and it was educational. Bystanders don't give a shit about a tow truck. Repo drivers know how to disable alarms etc. It's part of recovery.

--
"This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
Re:Wrong demographic by Jeng · 2012-01-13 08:58 · Score: 1

Close, more like, we could avoid their tanks on a continuous basis and they would never be the wiser, or we could blow up a couple tanks once.

--
Don't know something? Look it up. Still don't know? Then ask.

I don't quite get it by kav2k · 2012-01-12 07:45 · Score: 5, Funny

We need a car analogy here.

Re:I don't quite get it by DarkOx · 2012-01-12 08:35 · Score: 1

Sure its like if you had a car and left in a parking lot. Now suppose this car of yours had wireless unlock that did not use strong encryption, or any kinds of DH mutual authentication, rolling code, or time based scheme. Then suppose some guy with some relative simply radio equipment waited for you to unlock it. He can could then use a simply replay attack to unlock it and steal any shit you had in there.
Does that help.

--
Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html

Bait car? by NetNinja · 2012-01-12 07:46 · Score: 1

Ever watch bait car? They steal cars left and right!

Immobolizers by whitedsepdivine · 2012-01-12 07:47 · Score: 1

Most cars except for Benz, are really easy to bypass there immobolizations. You just have to open the car's ECU and rip out the immobolization chip. You just get a check engine light on after the chip has been removed.

Re:Immobolizers by BitZtream · 2012-01-12 08:48 · Score: 1

Welp, considering on my car that would require removing large portions under hood as well as, and heres the kicker ... opening a hermetically sealed aluminum box without damaging the sensitive components inside, some of which are designed to fail in case its opened that way.
I highly doubt I could (even with training/practice) GET the ECU out of my car and cracked up in 30 minutes. If you take 30 minutes to steal a car, you're caught.

--
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
Re:Immobolizers by whitedsepdivine · 2012-01-12 09:06 · Score: 1

I guess it really depends on the car, and your knowledge. Alot of cars, you rip up the carpet or remove a panel and the ecu is right there. Then it is as easy as opening a computer case.

Additionally if you new what the car was before hand by looking at the VIN, you could have an already cracked ECU ready to plug in.
Re:Immobolizers by Cramer · 2012-01-12 09:16 · Score: 1

On the cars I know, that's a lot more work than you might think. Audi/VW/etc. put the ECU where it isn't easy to reach. (unlike Datsun bolting them to the floor under the driver seat.) Once you do get to it, they're often filled with epoxy -- "weather proofing". Honda, on the other hand, easy to get to, easy to chip -- but I think that's intentional to make the cars favorable to hobby/tinkerers.
(Heh, our LeMons "race" car -- honda civic -- has two ECUs. One seriously hacked up for racing, and it's original OBD-II ecu for when it gets inspected. :-))

MagnaVolt by sycodon · 2012-01-12 07:51 · Score: 3, Funny

I'll stick with my trusty MagnaVolt System.

--
When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.

Re:MagnaVolt by DigiShaman · 2012-01-12 10:29 · Score: 2

Back in the late 90s, I remembering having a conversation with a car audio guy. He had a rather brilliant (if not deadly) idea. Run two exposed wires in parallel along the inside of the driver side door handle connected to the probes of a hidden taser (stun gun). When the would-be thief attempts to open the door, he get's a nasty little shock.
Only one problem with the idea. A semi-closed fist will clench harder when exposed to electricity. At least for AC current, not sure about DC however.

--
Life is not for the lazy.
Re:MagnaVolt by kmoser · 2012-01-12 17:56 · Score: 1

Or a Trunk Monkey.
Re:MagnaVolt by RockDoctor · 2012-01-12 21:41 · Score: 1

Is a Taser (loose sense) an AC source or a DC source? Considering how relatively easy it is to step up an AC voltage to high values (four off-the-shelf audio transformers would do the electrical work, but the windings might arc-over too easily), I'd bet that it's AC. Just possible that it'll be rectified, but I can't think of a good reason to do so.

--
Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
Re:MagnaVolt by AssholeMcGee+ · 2012-01-12 22:03 · Score: 1

Simply method for older cars, I had a hidden switch to cut the ignition system off, you can do this to 90's cars even some cars today, you could also attach a switch to the starter instead of the ignition. They go to start the car and get no starter motor or they cannot get it to fire over. Depending on how fast they want to steal the car or the time the fell they have. They will move on to another car, or figure you have a cut off switch and try to find it. Cannot tell you where I hid my switch but I found my car broken into and the ignition switch (or steering column) busted a few times.
Re:MagnaVolt by flyingfsck · 2012-01-13 00:09 · Score: 1

A hidden toggle switch and ignition coil and spark plug under the seat with some wires threaded into the seat works wonders. This was a rather common thing done by engineering students in the 1980s in my school...

--
Excuse me, but please get off my Pennisetum Clandestinum, eh!
Re:MagnaVolt by GrumpySteen · 2012-01-13 06:28 · Score: 1

Depends on the model. They all deliver a varying AC Voltage, but some models, like the X26, add pulses of DC as well. The waveform also varies and isn't a simple sine wave.
Re:MagnaVolt by wickedskaman · 2012-01-13 09:31 · Score: 1

So you live in Detroit... or Baghdad?

--
Sand's overrated... it's just tiny little rocks.
Re:MagnaVolt by RockDoctor · 2012-01-13 17:59 · Score: 1

Ah, the amount of dedication devoted to improving machinery of death and torture! what a wonderful investment of money, brains and time. I'll bet the people who develop these tools are endlessly proud of their work. [/sarcasm]

--
Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
Re:MagnaVolt by AssholeMcGee+ · 2012-01-13 20:15 · Score: 1

Buick Grand National, rare car, so it is a target for theft
Re:MagnaVolt by GrumpySteen · 2012-01-13 23:01 · Score: 1

While I'm disgusted by the all too frequent abuses of power that Tasers involved in, I have to admit that Tasers are much less lethal than gunshots so they are a step in the right direction.
We're never going to eliminate violence between humans (though it'd be nice if we did), so I'd much rather see society spending time and money spent developing weapons that are less lethal than see the focus shift to developing weapons that are more lethal.

Re:Sometimes hi-tech is not the best solution.... by hedwards · 2012-01-12 07:54 · Score: 1

Which is why police love lojacks, often times they not only get the car back, but they catch the thief red handed.

iPod port attack + iCloud = by AlienSexist · 2012-01-12 07:57 · Score: 1

Your car has been uploaded to iCloud and the criminal can now access it from anywhere!

Re:Sometimes hi-tech is not the best solution.... by Anonymous Coward · 2012-01-12 08:04 · Score: 1

Were in Vancouver when a theft ring wants a car they just show up with a flatbed and take it away. It doesn't even arouse suspicion.

IF they are in the car.... by Lumpy · 2012-01-12 08:12 · Score: 1

They already own the car.

Dont worry about a thief stealing the car by using the CD player. All of these articles are pure FUD. they cant do a "Shadowrun" style unlock and start from standing outside the car and using their Uber haxor toolkit.

--
Do not look at laser with remaining good eye.

Re:IF they are in the car.... by Anonymous Coward · 2012-01-12 08:54 · Score: 1

You obviously didn't RTFA. The most damning attack was when they got to the point of being able to play an MP3 recording of a dial-up modem session from an iPOD over a telephone handset they had dialed into the vehicle's cellular interface. There were then able to command the vehicle's doors to unlock.
Re:IF they are in the car.... by shilly · 2012-01-13 00:41 · Score: 1

I guess the economic incentives are there for someone to package this knowledge and sell on to car thieves, or to run a ring of them, but honestly, it still seems pretty damned unlikely.

Won't stop... by Anonymous Coward · 2012-01-12 08:15 · Score: 1

I have a Nissan with an Intelligent Key, so I can walk up to the car, push a button on the door handle, and the door unlocks. This is theoretically vulnerable to a relay station attack, where Mallory can put a radio in the next cubicle over and his accomplice stands outside with another radio, this "simulating" my key.

I doubt this would happen. If my car is even stolen, it will be by one of the following methods:

- Taking the physical key, whether by force (robbery/carjacking) or TWOC. TWOC is highly unlikely, since I keep my keys in my pocket, and at home, I have no roommate or teenage child to decide to take my car. My wife obviously has permission to drive my car.

- Towing. This would be quite easy, as people tend to ignore wreckers, assuming the car owner has requested towing, or that the car is parked illegally. This would most likely happen away from home, as I have a garage at home. This is also not very common.

I live in Tallahassee, FL, which was recently ranked the USA's 8th most dangerous city. LoJack isn't available here, but if it was, I'd most likely get it for both our cars, especially since it's a one-time cost.

Now, the Nissan Intelligent Key has one interesting quirk that I hope to never find out about. Assume a typical carjacking where the perp approaches my car with a gun and makes me get out, while he gets in and drives away. The Intelligent Key is in my pocket, so assuming the carjacker does not kidnap me or search my pockets, the first time he turns the ignition switch to off, he will be unable to restart the car without the key.

I used to have a car with the ultimate anti-theft device, and when my car is no longer worth maintaining, I will most likely get another one: a standard transmission. My current anti-theft device is that my car is a non-luxury mid-size, 5 years old, with 52,000 miles on the odometer, making it less appealing. Most effective if I park near an almost-new luxury SUV.

Ghost Dog by Massacrifice · 2012-01-12 08:20 · Score: 2

They have a movie about his. If you havent seen it, rent/download Ghost Dog : The way of the samurai. One of my best. Main guy steals Lexus with electro device he built himself.

http://www.imdb.com/title/tt0165798/

--
-- Home is where you eat your heart out.

Re:Ghost Dog by Massacrifice · 2012-01-12 16:43 · Score: 2

Stick with Armageddon, then.

--
-- Home is where you eat your heart out.

Re:Sometimes hi-tech is not the best solution.... by Anonymous Coward · 2012-01-12 08:21 · Score: 1

I have a friend of mine with a Jeep Wrangler. The glove box is left open, there is no radio, and there is obviously nothing in the vehicle. Still, thieves will hop in, and upon finding nothing to steal, will vandalize things, be if defecating on the seats or whatnot. So, having nothing to steal won't help things.

The ONLY thing I've found which actually helps against car theft is a car alarm that I had custom installed. Upon going off (and so far, I've never had a false alarm), it spews pink fog into the vehicle's interior while flashing strobe lights and having a distinct siren. I've had my truck broken into, but usually the break-in is pretty quick, and few thieves will be trying to crack into a strongbox welded to the frame while the vehicle is billowing fog. (In parking garages, it disperses quickly, but the fog machine can make the interior opaque in 3-5 seconds.)

Re:Sometimes hi-tech is not the best solution.... by CanHasDIY · 2012-01-12 08:34 · Score: 3, Funny

Well, here is the same, but in our case if a theft ring wants your car they just show up with a .22 on your window...

You must not live in a right-to-carry state, if thieves are carjacking folks with pea-shooters...

'Round these parts, that's the fastest way to get your ass blown off by someone with a real gun.

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese

Re:Sometimes hi-tech is not the best solution.... by istartedi · 2012-01-12 08:39 · Score: 2

On the Internet, nobody knows you're not a badass with a .44 at the ready under the driver's seat. (suppressed laughter). Yes we do. (open laughter).

--
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?

brakes.sys has caused a system error by Joe_Dragon · 2012-01-12 08:50 · Score: 2

To reboot the car trun key to off (soft switch)

If that does not work open hood and unhook battery

Re: brakes.sys has caused a system error by TubeSteak · 2012-01-12 10:39 · Score: 1

If that does not work open hood and unhook battery
Then drive to the dealership so they can reset your stereo/satnav

--
[Fuck Beta]
o0t!

Re:Sometimes hi-tech is not the best solution.... by betterunixthanunix · 2012-01-12 08:51 · Score: 1

If you do not think a .22 is a worthy gun, then why not come down to the range and hold up my targets while I shoot mine?

A .22 is plenty deadly, and I would not bet my life on rimfire cartridges not being less reliable than centerfire. If someone already has a gun pointed at you from a foot away, you are not going to get your gun out of the holster before they shoot you, and that is regardless of what caliber they are packing.

--
Palm trees and 8

just what we need more tech to lock to dealer by Joe_Dragon · 2012-01-12 08:54 · Score: 1

Get ready to say good buy to any non dealer car repair place. And if they want to be real dicks about dealer oil changes at 3000 miles.

Car theft via towing by Firethorn · 2012-01-12 09:39 · Score: 1

Another thing about towing - people might assume the car is being repossessed. The 'not very common' thing might not be common, but it's a fairly well known method, as you don't have to break jack to do it. More appropriate when it comes to top end vehicles.

Personally, I'm tempted to install a hidden kill-switch.

--
I don't read AC A human right

Re:Sometimes hi-tech is not the best solution.... by k6mfw · 2012-01-12 09:40 · Score: 1

Lo-Jack freq is 173.075 if you want to DF one of these guys.

--
mfwright@batnet.com

Re:Plenty of room to improve car security by c0lo · 2012-01-12 09:55 · Score: 1

Seems like the obvious next step in vehicle security is to be more pro-active in the defenses, i.e., reliance on tracking systems to show where the car is, built-in webcam to take pictures of people approaching and occupying the car (yeah, he can wear a mask, but that makes him obvious to onlookers), etc. Your car should be pretty safe if, in addtion to jimmying the doorlock (by electronic means or otherwise), the thief needs to disassemble the engine block and pull out the module that is transmitting the car's GPS coordinates. Hard to do casually in an open area.

Doh... MS Security Essentials - it's free. ;)

--
Questions raise, answers kill. Raise questions to stay alive.

Re:Alarm by c0lo · 2012-01-12 10:01 · Score: 1

I always wondered about the legality of installing a pepper spray car alarm system. Is it considered a bobby trap?

No, it's a boobs trap.

--
Questions raise, answers kill. Raise questions to stay alive.

Re:Pleaze! by c0lo · 2012-01-12 10:04 · Score: 1

Nope... but Lord (and Janis) willing, you might have a Mercedes.

--
Questions raise, answers kill. Raise questions to stay alive.

Re:Sometimes hi-tech is not the best solution.... by Anonymous Coward · 2012-01-12 10:20 · Score: 1

Aww, beat me to it.

Sure, you can have a big gun that will atomize their entire skull for all it matters. All the attacker needs however is to have the drop on you. Your arms move downwards even slightly? Well, you may still have a skull, but there's going to be a nice, neat hole in the front of it, and you may have difficulties after that drawing your own elephant-exploding pistol.

Having a big gun is fine and all if you need to overcompensate the hell out of yourself, but when it comes down to it, being threatened with even the smallest of guns is going to make 99.999% of people do exactly as their told, no ifs ands or buts. The remaining .001% have that aforementioend neat, small hole in their forehead.

Re:Sometimes hi-tech is not the best solution.... by GameboyRMH · 2012-01-12 10:32 · Score: 1

The only anti-theft system I'd consider putting on a car is a DIY lojack. Basically like a smartphone you can reverse-SSH into and get the GPS coordinates from, and provide a web interface for law enforcement if the car is stolen. The only downside is that your full travel history could be pulled up by the telco...I can't think of a simple way to detect if the car is started by hot-wiring. But any car I own will be either not worth stealing or too strange and complex to steal.

--
"When information is power, privacy is freedom" - Jah-Wren Ryel

Re:Sometimes hi-tech is not the best solution.... by Whorhay · 2012-01-12 10:32 · Score: 1

I'd agree that going for a gun when someone already has one directed at you is silly. But that doesn't mean you can't fight back very effectively, especially if they are within arms reach.

Somewhere I saw a video of a guy disarming an armed assailant. From the time he decided to disarm the guy it took 12 thousandths of a second for him to do it. I'd like to see what percentage of street thugs have a reaction speed quicker than that. People can move very quickly when motivated, even an overweight person with a knife can close 20 feet of seperation before the person he's charging can draw and fire reliably.

So yes going for your gun is stupid but make no mistake, beating another persons reaction time is not hard.

Re:Sometimes hi-tech is not the best solution.... by colinrichardday · 2012-01-12 12:09 · Score: 1

How well does a .22 penetrate car windows/doors?

Old Skool solution by El_Oscuro · 2012-01-12 12:39 · Score: 2

After my father's 1963 Chevy was stolen, he installed a car kill switch kit. You can get them for modern cars too. Since you put the switch where ever you want, it would take a thief time to find it, and they won't be bothered. You can sometimes get a lower insurance rate too.

--
"Be grateful for what you have. You may never know when you may lose it."

Re:Old Skool solution by jackbird · 2012-01-12 16:19 · Score: 2

Ah, yes, the joy of puzzled phone calls from mechanics who you forgot to tell (or who didn't remember) that the car won't start without the rear defroster turned on.

Re:The amount of crime is directly proportional to by colinrichardday · 2012-01-12 12:52 · Score: 1

Wouldn't that make the amount of crime inversely proportional to the length of prison sentences?

Any truth to this? by ArchieBunker · 2012-01-12 13:46 · Score: 1

I've heard this mentioned other places. It was said by one person and kept repeating.

Can anyone locate a proof of concept attack using a special burned cd? Sure everything is connected but I don't think its possible.

--
Only the State obtains its revenue by coercion. - Murray Rothbard

Re:Any truth to this? by StefanSavage · 2012-01-13 06:28 · Score: 1

Page 7 of the linked paper.
- Stefan

Re:Sometimes hi-tech is not the best solution.... by Beryllium+Sphere(tm) · 2012-01-12 13:54 · Score: 1

Getting into a gunfight over an insured car is not good security thinking.

bluetooth dongles on OBD-II by nazsco · 2012-01-12 14:17 · Score: 3, Insightful

always wondered. you can pretty much drive by some OBD-II ports... bmw can be started even by my old obd-I.

and lots of people buy those bluetooth dongles just so they can have an extra tachometer on their iphones on the dash.

may not be so usefull for stealing the car... as i doubt it has power when the car is off... but may very well be the case, i don't know. But imagine sending the acelerate signal on the highway to everyone around you that has such device

Disabling some alarm systems... by aaronb1138 · 2012-01-12 15:31 · Score: 2

Certain model Fords from the late 90's had the alarm (PATS) system in a separate module in the trunk. If you could jimmy the trunk open, all you needed to do was disconnect one harness.

This eliminated the need for the transponder key and disabled the alarm completely. Hot wiring the car from there is rather conventional and trivial.

Wasn't till the 2000s that they at least had the thought to add a bit in the ECU ROM or a bit switch (don't recall which) that told the ECU to require the security module.

A few other car makers had similar easy to defeat modular systems, but I'm not sure about years and makes from that time.

Re:Sometimes hi-tech is not the best solution.... by couchslug · 2012-01-12 17:51 · Score: 1

Of course not. Ordinary repo work.

--
"This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."

Re:The amount of crime is directly proportional to by colinrichardday · 2012-01-12 18:24 · Score: 1

I wasn't really trying to debate criminology. I was just questining OP's use of "directly".

A very good article. by sr180 · 2012-01-12 18:36 · Score: 1

This is one of the best articles place on Slashdot in a long time. Its a pity that very few of the above posters have actually read it.

Firstly, it details the methods of accessing the car. Surprisingly, the CD was most effective. They found vulnerabilities in parsing MP3's and WMA's. They reverse engineered the firmware, - found a buffer overflow and exploited it. From there, they then exploited the Dealer tools used to analyse vehicle faults.

So, infect and mp3 and upload it via sharing. That infects cars, which then infect their dealer tools. The infected dealer tools can then reprogram ecu's and other devices on the cars themselves.
This is only the start. They then proceed to find more in depth vulnerabilities and propose possible wholesale models of theft that become possible. For anyone with an interest in hacking (and true hacking, not just script kiddy stuff) then have a good read of this article...

--
In Soviet Russia the insensitive clod is YOU!

Re:A very good article. by shilly · 2012-01-13 00:37 · Score: 1

Really? You thought it was good? I thought it was a bit far-fetched, tbh. It's not that it was describing impossible threats, just that they were somewhat implausible. For example, they described the CD threat in action as follows:
"Consequently, an adversary might deliver malicious input by encoding it onto a CD or as a song file and using social engineering to convince the user to play it.
Alternatively, she might compromise the user’s phone or iPod out of band and install software onto it that attacks the car’s media system when connected."
What are the possible circumstances when person A is going to do something nasty to person B by:
i) befriending them
ii) learning enough tech to be able to encode a piece of malicious code and embed it in a WMA or other file on a CD
iii) giving them a CD and convincing them to play it in their car
iv) having an attack work that is sufficiently distant in mode and in time that person B doesn't recognise that it was person A who did it
?
I guess spies / covert agents might want to do this. But in day-to-day life, surely the vast majority of people with malintent will pick a simpler attack?
Re:A very good article. by shilly · 2012-01-14 06:55 · Score: 1

But you don't need to use a CD to steal a car....

Re:Sometimes hi-tech is not the best solution.... by hedwards · 2012-01-12 19:08 · Score: 1

Honestly, you should just get a lojack, chances are that the insurance company will pick up the tab on it, and unlike a smarthphone there's a sensor for it on just about every cop car out there.

Personally, I'm not sure that I'd get one, but if one is concerned with recovering ones car it's one of the few options that actually works. The one you're suggesting is unlikely to actually work if it comes to it.

Security devices in the car not so good by fmaresca · 2012-01-13 01:18 · Score: 1

I wish my latests cars were not so security thigh, most notably not codded and/or RFID key.

Security devices only levels up the barrier for the lifters to get a car, forcing them to take cars when the driver is in the vehicle.
In the good old days they could lift a car with a jumper cable to the ignition coil and get away in two minutes, now they need to take it from you at gun point, between two or more thefts and most of the time getting away with you in the car for a couple of miles or even take the opportunity for an ATM raid.

I much prefer the old way, really.

Re:Sometimes hi-tech is not the best solution.... by SpooForBrains · 2012-01-13 02:00 · Score: 1

http://www.youtube.com/watch?v=jTOqLtI4Aro

--
"The dew has clearly fallen with a particularly sickening thud this morning"

Re:Sometimes hi-tech is not the best solution.... by SpooForBrains · 2012-01-13 02:04 · Score: 1

also: http://www.youtube.com/watch?v=hxQVUV0oa_0

The film absorbs one shot. Doubt it would take two (they don't demonstrate). I imagine unprotected glass wouldn't withstand one shot.

and: http://www.youtube.com/watch?v=Sq_3STLnSe0&feature=related

--
"The dew has clearly fallen with a particularly sickening thud this morning"

This won't stop professional thieves by macshome · 2012-01-13 04:03 · Score: 1

Security systems, fancy locks, or anything else doesn't deter pros. They just drive up with a flatbed or tow truck, scoop the car up, and drive away.

Re:Sometimes hi-tech is not the best solution.... by Whorhay · 2012-01-20 07:16 · Score: 1

The car is purely incidental. What you are gambling is a civil society versus one where a person can threaten physical violence to take anothers property at will. Whether it's my car, watch or wallet, you can bet I'll resist if I think it is reasonably possible I'll succede. I'm a male of larger than average size, I have some wrestling and martial arts experience along with plenty of gun handling. In a fight I'll do what is necessary to survive and I'll be doing it right up front rather than doing it by degrees.

When someone sticks a gun in your face and threatens you they have obviously not decided to kill you yet. So long as you don't mull over the decision too long and telegraph your intent obviously, you can easily deflect their weapon and execute your own attack before they can react. So the real question is whether or not you can attack and follow through well enough to survive. Not everyone can or is willing to and expecting them too would be silly, but those of us that can, should.

Slashdot Mirror

The Future of Hi-Tech Auto Theft

200 of 272 comments (clear)