The Future of Hi-Tech Auto Theft
NicknamesAreStupid writes "Over the past twenty years, car theft has declined as new models incorporated electronic security methods that thwarted simple hot-wiring. The tide may now be turning, as cars become the next Windows PC. The Center for Automobile Embedded Systems Security has posted an interesting paper from UCSD and UW that describes how modern cars can be cracked (PDF). Unlike the old days of window jimmies, these exploits range from attacks through the CD or iPod port to cellular attacks that take inventory of thousands of cars and offer roaming thieves Yelp-like choices ('our favorite is mint green with leather') with unlocked doors and running engines."
Yes I would download a car.
one of the reasons auto theft declined is police busted and closed chop shops that took and resold the parts. and you can now buy cheap off brand parts for any car as well. not like anyone stole cars back in the day for personal use
It's not clear to me why the CD player should even be on the same network as the engine-related microcontrollers.
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
So the other day I was on the bus and I saw this hot woman driving a car. I pulled out the iPhone, SSH'd into home and ran nmap on her license plate.
LOL, stupid woman didn't notice her gas cap was left off from the last fill but nmap caught it. Used nc to push 'fire.jpg' into her tank and she blew up.
True story, fucker.
Trolling is a art,
wonder if it has active directory connectivity? that would be so cool to add my car to the company's AD forest
In many many ways we've been opening more security holes in our cars as time progressed, the wireless unlockers. Even if we pretend that wireless isn't heaven to sniff and spoof. People leave their keys out in all sorts of public places, not everyone locks them up at the gym, most people leave them unattended at a waterpark or beach etc... before wireless that was reasonable, no-one is going to steal my keys because there are 500 cars in the parking lot, nobody can try each one. now with wireless, if you steal someones keys, you can just walk around the lot and push a button to make it beep and find out where the car is.
I seriously doubt this will have much effect on car thievery. A jimmy and hotwiring are things pretty much anyone can do. On the other hand, hacking a car's PC is not a skill generally held by people who have an actual desire to steal cars. I expect a few very expensive cars will be stolen via high-tech means, but I wouldn't expect this to cause a noticeable change on cat theft rates for non luxury cars.
Help I'm a rock.
It's a stupid flamebait analogy. The summary goes like this
* Windows PCs are as secure as a piece of tissue paper (LOL, for teh win!)
* Cars with their increasingly computerized systems are now becoming vulnerable to hacking.
* Windows PCs are vulnerable to hacking.
We need a car analogy here.
The concept is that electronicly secured cars become wide-spread and common. It was why Windows PCs were attacked with viruses first. Now that Mac is more common, you see more attacks against them. It's why you see malicious Android apps. Soon, you'll start seeing malicious car apps......
It's all about wide spread opportunity. You need a lower percentage of successful attacks as the number of targets increases.
Do that and when you leave the company, suddenly you can't start your car. :)
If I were God, wouldn't I protect my churches from acts of me?
I'll stick with my trusty MagnaVolt System.
When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.
We had car analogies for computers, now we have computer analogies for cars.
The reason this has not happened sooner is that remote start and auto-unlock are not the only features of OnStar. Key-fob/rfid cloning exists and is not prohibitively difficult. Remote engine kill makes initial get-away more difficult outside of a very small window of time. While vehicle tracking can find the vehicle after it has disappeared from the owners line of sight. Plus, exposes the chop shop location to the authorities.
Until it is possible to cheaply, easily, and quickly block/disable both GPS and cell signals to/from the vehicle after the theif comprimises the it, this high barrier to auto-theft will remain.
Criminals are VERY quick to change their m.o. in the face of tougher security. With many police forces adopting "no reponse with out confirmation" to burlgar alarms. It is much easier to burgle commercial and residential property.
Along the same vein: Watch an episode of "bait car". (one is all you really need) Where the police leave a car in a opportunistic way for a would-be theif to capitalize on the seemingly abandoned car.
For every benefit you receive a tax is levied. - Ralph Waldo Emerson
They have a movie about his. If you havent seen it, rent/download Ghost Dog : The way of the samurai. One of my best. Main guy steals Lexus with electro device he built himself.
http://www.imdb.com/title/tt0165798/
-- Home is where you eat your heart out.
Well, here is the same, but in our case if a theft ring wants your car they just show up with a .22 on your window...
You must not live in a right-to-carry state, if thieves are carjacking folks with pea-shooters...
'Round these parts, that's the fastest way to get your ass blown off by someone with a real gun.
An enigma, wrapped in a riddle, shrouded in bacon and cheese
On the Internet, nobody knows you're not a badass with a .44 at the ready under the driver's seat. (suppressed laughter). Yes we do. (open laughter).
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
To reboot the car trun key to off (soft switch)
If that does not work open hood and unhook battery
OnStar is a GM brand. I'm told the Toyota/Lexus Enform/Safety-Connect system is run by OnStar. (on verizon's network.)
If you're going to boost a car thusly equiped, you'd be wise to remove or disable the thing FIRST. When manufacturers get wise and link the module into the anti-theft logic -- meaning the car won't work without it -- simply disable the radio/antenna. Not being able to start your car because it cannot see T-Mobile's network (for example) would never be accepted by customers.
OnStar is a GM brand. I'm told the Toyota/Lexus Enform/Safety-Connect system is run by OnStar. (on verizon's network.)
Duly noted.
If you're going to boost a car thusly equiped, you'd be wise to remove or disable the thing FIRST. When manufacturers get wise and link the module into the anti-theft logic -- meaning the car won't work without it -- simply disable the radio/antenna.
For the record (and the benefit of my fellow paranoids), you can actually request this equipment be disabled for you by the dealer prior to purchase, or by the owner if they know where to look. Of course, this is a moot point for those who actually intend to pay for and use the service, but personally I would never subscribe to a service that can arbitrarily disable my vehicle without my permission... among other, privacy related issues.
Not being able to start your car because it cannot see T-Mobile's network (for example) would never be accepted by customers.
Yea... I remember saying something similar when GPS devices started becoming ubiquitous in cell phones... 'surely no one will accept a phone with a built in tracking device!'
Ah, the naivety of youth..
An enigma, wrapped in a riddle, shrouded in bacon and cheese
After my father's 1963 Chevy was stolen, he installed a car kill switch kit. You can get them for modern cars too. Since you put the switch where ever you want, it would take a thief time to find it, and they won't be bothered. You can sometimes get a lower insurance rate too.
"Be grateful for what you have. You may never know when you may lose it."
always wondered. you can pretty much drive by some OBD-II ports... bmw can be started even by my old obd-I.
and lots of people buy those bluetooth dongles just so they can have an extra tachometer on their iphones on the dash.
may not be so usefull for stealing the car... as i doubt it has power when the car is off... but may very well be the case, i don't know. But imagine sending the acelerate signal on the highway to everyone around you that has such device
Certain model Fords from the late 90's had the alarm (PATS) system in a separate module in the trunk. If you could jimmy the trunk open, all you needed to do was disconnect one harness.
This eliminated the need for the transponder key and disabled the alarm completely. Hot wiring the car from there is rather conventional and trivial.
Wasn't till the 2000s that they at least had the thought to add a bit in the ECU ROM or a bit switch (don't recall which) that told the ECU to require the security module.
A few other car makers had similar easy to defeat modular systems, but I'm not sure about years and makes from that time.