Mercedes Can Now Update Car Software Remotely
MatthewVD writes "Our cars run millions of lines of code that need constant and, often, critical updates. Jim Motavalli writes that Mercedes-Benz's new mbrace2 'cloud infotainment system' has a secret capability: it can update software automatically and wirelessly. In a process called 'reflashing,' the Mercedes system turns on the car operating system (CU), downloads the new application, then cuts itself off. With companies like Fisker paying dearly for constant recalls for software problems, automakers will likely rush to embrace this technology. No more USBs in the dashboard!"
Remote Vehicle Diagnostics Beyond allowing you to perform a check of your vehicle's main systems remotely, mbrace2 technology can automatically alert both you and your authorized Mercedes-Benz dealer to potential issues before they become full-fledged problems. In addition, it enables your vehicle to receive software updates wirelessly through the mbrace2 network.
So while maybe undesirable, not sure it's 'secret'.
Mercedes is now able to crash cars remotely.
This also means that hackers and government agencies can update the software automatically and wirelessly. Finally there is no more need for cutting the break cables.
I was going to say something, but I can't think of anything clever, because I'm shaking my head in disbelief so fast that I'm getting dizzy. Please tell me that the wireless interface at least has its own fuse that can be pulled.
Soon:
- First maleware for cars spotted in the wild. Car manufacturers: "No problem. it only infects the multimedia system"
- Maleware displays a huge kitty on the HUD. First malware caused traffic accident with casualties.
- Anti-Virus Software mandatory for cars
- Kaspersky/McAffee/.. : ~40% of all cars infected with one virus or another....
I can see this will be exploited somewhere along the way...
Yep, can wait to get buggy version 1.0 delivered with the car and a little note of the "Known issues that will be fixed soon" :-)
Well Mercedes are a favourate of bankers and corporate "fat cats". I couldn't think of a better challenge to Anonymous. Speed limiter to 20mph? Stuck in the driveway? I wait with eagerness.
An what happens the first time they send out a bum update and brick thousands of cars? Particularly if some of them happen to be moving on the road at the time.
How long until all police cars will be fited with programs that uploads a breaks-is-always-on update?
I'm assuming the car connects to some sort of 3g or other wireless network to download updates.
Who pays for this?
TOTALLY a good idea ...
coz nobody will find a way to abuse this
right?
... the car decides to download and install new firmware at the exact same time as Mick Mechanic pulls the battery or the main fuse out? A very VERY expensive brick?
No automatic updates for me, unless Mercedes wants to install a computer to update in my '84 300TD.
I don't suffer from insanity, I enjoy every minute of it! --Longbottle
"In a process called ‘reflashing,’ the Mercedes system can turn on the car operating system (CU), download the new application, then cut itself off."
So the car is regularly polling a server and can switch itself on? That sounds decidedly unsettling.
Could somebody elaborate on the diagnostic capabilities of these cars? Do they alert you if your brakes are inefficient or if your tyres are wearing out? I'm too poor to afford one to know :(
Cheers.
Soon: - First maleware for cars spotted in the wild. Car manufacturers: "No problem. it only infects the multimedia system" - Maleware displays a huge kitty on the HUD. First malware caused traffic accident with casualties. - Anti-Virus Software mandatory for cars - Kaspersky/McAffee/.. : ~40% of all cars infected with one virus or another....
Great, so now my car's only gonna go 15 mph because McAffee is using 90% of my engine resources.
If Mercedes has cracked the trick of 100% successful upgrades over air, great! If not, I'd prefer to know that the systems controlling almost everything on the Mercedes hurtling towards me is not going to die at some arbitrary moment. Bricked iPhones are inconvenient. Bricked 2-ton vehicles moving at 70mph are very inconvenient!
Virtually serving coffee
Maybe in the US. Here, in the socialist hell that is Europe, they're really fairly common.
First question that came to mind when I read the article was, "will the update be pushed, or will the driver have to initiate it?" Second question was, "updates can't be done while the engine's running..... can it?" I assume this mbrace2 system is tied into the car' main OS based on what the "secrets" linked article says.
Can't find many details atm, but evidently you get to pay a yearly subscription fee for the updates... sounds nice.
expletives welcomed
So you're the getaway driver sitting in the stolen Merc - your partners in crime are runing towards you. You hit the 'start' button... "Please wait while we install the latest software update. This process will take approximately 5 of your finest German minutes." Fantastic!
The system is also able to collect any kind of data from the connected sensors and send them automatically and wirelessly to the manufacturer. It's called "automatic updates" these days, but it's just another name for eavesdropping.
"Our cars run millions of lines of code that need constant and, often, critical updates."
Spot where the real issue is.
I remember a time where computer games were tested before they were released, because there was simply no way to update them. I would expect a car (where real lives are at stake) to be tested better then a game.
In a period of million-strong protests, imagine an unbroken row of Mercedes lined up parallel to the protest route. Or, say, in front of it, to soak up the water, sound-cannons, rubber bullets, real bullets, beanbags, ... and all the other stuff supposedly democratic 'representative' governments are so willing to employ against their own population's wishes.
I''d better start writing the plot resume - before reality outpaces any further attempt at fiction.
From the Mercedes site:
Remote Vehicle Diagnostics
Beyond allowing you to perform a check of your vehicle's main systems remotely, mbrace2 technology can automatically alert both you and your authorized Mercedes-Benz dealer to potential issues before they become full-fledged problems. In addition, it enables your vehicle to receive software updates wirelessly through the mbrace2 network.
So while maybe undesirable, not sure it's 'secret'.
really good.
lease takeover
Hacking cars has already been done, and is shown here in this ted.com video. 4:42 is where he explains about it.
http://www.ted.com/talks/avi_rubin_all_your_devices_can_be_hacked.html
Many of the internal systems was hacked, including the system for breaking.
From ted.com:
"Could someone hack your pacemaker? At TEDxMidAtlantic, Avi Rubin explains how hackers are compromising cars, smartphones and medical devices, and warns us about the dangers of an increasingly hack-able world.
Avi Rubin is a professor of computer science and director of Health and Medical Security Lab at Johns Hopkins University. His current research is focused on the security of electronic medical records"
I'll take the dumb car that doesn't spy on my every move and report that information to the highest bidder.
"We are just a war away from Amerikastan. When god vs god the undoing of man." Dave Mustaine
There are a lot of people out there looking to do something malicious to others, so here's the perfect way to open the door to secretly messing with Mercedes owners. Just get a small transmitter used to emulate the official server, get it close to a Mercedes, and now push an update that KILLS the car. No fix until it gets back to a dealership where the chip can be replaced with one that isn't borked.
Why quote the word? It's a common English word these days, especially amongst nerds reading slashdot.
I want to delete my account but Slashdot doesn't allow it.
I can image the grief a wireless flash might cause on a factory car with mods, potentially rendering it undrivable; and leaving the owner fighting the factory over whose fault it is.
I'm a consultant - I convert gibberish into cash-flow.
Am I the only one who finds this statement disturbing regarding the firmware of a car which potentially can have all aspects of driving controlled by wire?
"Our cars run millions of lines of code that need CONSTANT and, OFTEN, CRITICAL updates" (Emphasis added by me)
Insensitive? Sorry, I meant illiterate. Also hysterical and technically ignorant, but we'll leave it there for today.
The las thibg Michael Shumacher needs is to be approaching a corner at 150mph and the car decides to update the brake control software.
LOL -> http://news.slashdot.org/comments.pl?sid=2773441&cid=39617909 hahahaha
And so... It has come to this.
As you can in a border area pick up a NON US tower and face data fees that can hit highs of $20 a MEG. Now how will be stuck with that bill?
Also you can be driving in canada and will the car stop trying to update it self or just auto do it with a very hidden menu to trun it off.
LOL -> http://news.slashdot.org/comments.pl?sid=2773441&cid=39617909 hahahahahahahahahaha
I am refreshed to see that we have learned precisely nothing from the internet and lately 'smart' phones. Remote diagnostics are probably useful (I remember fondly the sign on the PDP-11/70 years ago that lit up 'REMOTE' when engaged. One of the staff added to the front panel -- 'your chance of getting anything done today is...'. But having some server in Deutschland reach out and update my software while driving along does not fill me with confidence. One wonders if the aviation industry will be salivating at the idea of updating an airbus in flight...
car a jiffy lube void warranty void warranty!
REMOTE DIAGNOSTICS
An additional benefit of Roadster ownership made possible by firmware is Tesla’s ability to diagnose a car’s operations remotely. If an owner feels something has gone wrong with their car, remote diagnosis enables the Tesla Rangers to determine the issue and a solution without direct access to the car.
The Roadster firmware contains a system that allows the car to “talk” to headquarters if the customer chooses. In the situations where customers have opted-in, the firmware team has used information transmitted to Tesla to alert an owner of a pending problem and constantly innovate Roadster firmware.
Tesla had this several years ago. The big difference is that Tesla lets you know about it. Mercedes just rips it off and keeps quiet about it. Nothing new.
I prefer the "u" in honour as it seems to be missing these days.
Tesla has been doing this for several years. They wait until middle of the night and the car is plugged in. Then re-flash. No big issues. For those of you thinking that this is a bad thing, they monitor batteries, provide updates, and even allow you to download your own information. My only issue with this is the idea that access COULD be provided to the feds/local police for seeing where the car is. However, I am also guessing that this will be done on all cars over the next 5 years. The reason is that all car makers will want similar capabilities to what Tesla has. Model S goes far beyond the Windows nightmare that Ford has.
In addition, my guess is that Mercedes is borrowing the idea, if not the code, from Tesla. Keep in mind that Mercedes bought a LOT of tech from tesla.
I prefer the "u" in honour as it seems to be missing these days.
LMAO -> http://news.slashdot.org/comments.pl?sid=2773441&cid=39618071
is that the reason that my car is doing 90 in reverse locked in a tight circle, or is my payment due?
if this is supposed to be a new economy, how come they still want my old fashioned money?
I don't see how this is new or revolutionary, the cars have had GPS (wireless!) for awhile now... I think they just had their "millions of lines of code" finally work enough times so that they're comfortable reflashing a vehicle remotely. Which makes me a bit nervous, I'd almost rather have a mechanic stick a flash drive in, so when it fucks up he has to fix it (avoiding me a tow).
Sure, you pinpointed one of the really eerie parts of this.
Let's even say it's not hackers, can you imagine if the company itself messed up its update, even just on the install? You're going 65 miles down the road, then the car freezes for two seconds while the update installs?!
Yeesh.
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
That's why I'm waiting for the iCar from Apple. It will just work and not get malware!
It is a handbrake. It can be used in emergencies, such as failure of the main (dual) braking system. It should be used for parking. It can also be used for other purposes such as doing a 'handbrake turn'.
I have used a handbrake when I drove onto a muddy verge. One rear wheel just spun when I tried to drive off, the differential passing all power to the spinning wheel. By applying the correct amount of handbrake to resist the spin, some power went to the other wheel and I could drive off. This only works for rear wheel drive.
"sorry guys we have to wait until the car re flashes itself. in the mean time we can play spot the swat team!"
I got to the chocolate box before you, that's why the hard ones have teeth marks.
This SOUNDS good on the surface, but, I ALWAYS have issues with making major software updates remotely and without warning.
Being in IT, I've had to back out WAY to many "FIXES" that killed the system. My wife and children have iPods and every update runs the risk of having to completely restore the #(% thing from backups.
Imagine a software update that shuts down every Benz on the Five during rush hour on Friday evening?