Slashdot Mirror

← Back to Stories (view on slashdot.org)

Mercedes Can Now Update Car Software Remotely

Posted by timothy on from the new-context-for-blackmail dept.

MatthewVD writes "Our cars run millions of lines of code that need constant and, often, critical updates. Jim Motavalli writes that Mercedes-Benz's new mbrace2 'cloud infotainment system' has a secret capability: it can update software automatically and wirelessly. In a process called 'reflashing,' the Mercedes system turns on the car operating system (CU), downloads the new application, then cuts itself off. With companies like Fisker paying dearly for constant recalls for software problems, automakers will likely rush to embrace this technology. No more USBs in the dashboard!"

30 of 228 comments (clear)

  1. Secret capability? by commlinx · · Score: 5, Informative
    From the Mercedes site:

    Remote Vehicle Diagnostics Beyond allowing you to perform a check of your vehicle's main systems remotely, mbrace2 technology can automatically alert both you and your authorized Mercedes-Benz dealer to potential issues before they become full-fledged problems. In addition, it enables your vehicle to receive software updates wirelessly through the mbrace2 network.

    So while maybe undesirable, not sure it's 'secret'.

    1. Re:Secret capability? by erroneus · · Score: 4, Insightful

      If this were not the manufacturer of the car doing this, I might have thought the same thing you are thinking. But if people begin to get troubled with too much recommended maintenance, they will start to believe their cars are unreliable and will not buy another one... or at least not one that tells them things they don't want to know.

    2. Re:Secret capability? by geekmux · · Score: 3, Insightful

      If this were not the manufacturer of the car doing this, I might have thought the same thing you are thinking. But if people begin to get troubled with too much recommended maintenance, they will start to believe their cars are unreliable and will not buy another one... or at least not one that tells them things they don't want to know.

      Are you paying for "reliability" or "Government-regulated mandatory safety upgrades"?

      "Repairs" can be spun many, many different ways...such as the difference between optional and mandatory types of insurance. People hate paying for either type of insurance, but don't see much of a choice when it's "mandatory". A "cost" turns into a "fee" if EVERY car owner is charged for it, so this is yet another vehicle to mandate mass fees, turning profits through "safety standards"(for both the auto industry and Government). But you somehow feel better about it, because your 37 air bags are all up to date with the latest software patch and ready to protect you (not that they didn't before).

      Oh and your insurance company feels better too, because they got a piece of the profits as well by mandating that no car will be insured without an "active maintenance subscription". Oh yeah, you'll need auto anti-virus protection too.

      (I mean seriously, what do you think auto and insurance lobbyists do all day?)

    3. Re:Secret capability? by pnewhook · · Score: 5, Insightful

      Given that most new cars have a period of maintenance factored in where the owner does not pay for warranty work (often 5 years), any warranty work performed like software updates simply come right off the companies bottom lin.e It only makes good business sense to make this as inexpensive as possible and if they can do updates remotely without actually going into the dealer then this is a huge cost savings for them and far more convenient to the owner.

      Also, given how much of the safety systems on these high end Mercedes are under software control, I wouldn't be surprised if the lawyers are warning the company that if they do not do due diligence in rolling out safety related upgrades, then they may be liable for crashes related to the failing of this software. In such a case making sure the software updates are rolled out to as many people as possible as easily as possible would be a mandate of theirs.

      --
      Tesla was a genius. Edison however was a overrated hack who liked to torture puppies.
  2. What a revolution by Anonymous Coward · · Score: 4, Funny

    Mercedes is now able to crash cars remotely.

  3. Many possibilities by Anonymous Coward · · Score: 5, Insightful

    This also means that hackers and government agencies can update the software automatically and wirelessly. Finally there is no more need for cutting the break cables.

    1. Re:Many possibilities by supersat · · Score: 3, Insightful

      I'm willing to bet it's far more likely that they'll need to patch security holes remotely than it is for the update mechanism itself to be exploited. That is, assuming they digitally sign the updates.

    2. Re:Many possibilities by arth1 · · Score: 4, Insightful

      I'm willing to bet it's far more likely that they'll need to patch security holes remotely than it is for the update mechanism itself to be exploited. That is, assuming they digitally sign the updates.

      So? Even a 1000:1 ratio would be unacceptable.

      And if a lesson were to be learned from Playstation / XBox / DVD / Blu-Ray / iPhone, it's that as long as customers (and thus hackers) have access to the hardware, keeping things secret is a temporary reprieve at best.

    3. Re:Many possibilities by toastar · · Score: 4, Funny

      What, you mean security through obscurity doesn't work?

    4. Re:Many possibilities by houghi · · Score: 3, Funny

      I use security through less security. People are so trained that passwords are at least 6 characters long and often 8 that they will never try my SPACE as password.

      --
      Don't fight for your country, if your country does not fight for you.
    5. Re:Many possibilities by geekmux · · Score: 3, Funny

      It's not a parking brake, never was. It's an emergency brake. I bet most people in the U.S. never bother setting it when the car is parked, heck, many of them I'm sure wouldn't know where it is or how to use it in an emergency. There's a "P" setting on the shifter, that's good enough :/

      Oddly enough, the laws of inertia still exist in the Western Hemisphere, even including the United States!

      (I hear there are hills too...)

    6. Re:Many possibilities by erroneus · · Score: 3, Insightful

      We ignore laws here... especially the government.

    7. Re:Many possibilities by mapkinase · · Score: 3, Insightful

      I am tired of this standard banal instantly modded up response:

      - Something is made easier
      - Aha! Government all other evil guys will have easy access too!

      Duh!

      --
      I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
    8. Re:Many possibilities by LoRdTAW · · Score: 5, Informative

      I know I'm feeding the trolls but:

      It's not a parking brake, never was. It's an emergency brake.

      If you have a stick shift (aka manual or standard) transmission, the emergency/parking brake lever is what you use to park your vehicle and as a backup mechanical brake if for some reason your normal hydraulic brakes completely fail. So yes it is a parking brake in addition to being a last resort mechanical brake. They are still present on all(?) automatic cars as a safety feature. Before the parking pawl it was the only way to park your vehicle so it has and always will be an emergency/parking brake. After a while it became commonplace to just call it a parking brake, maybe the word "emergency" made people feel uncomfortable. Who knows.

      When automatic transmissions first came around, the "parking pawl" was not always present so a lever or handle was necessary to mechanically lock the vehicles brakes to prevent it from rolling, like a manual. Then the parking pawl was standardized (in the US around 1965) to give drivers a more safe and reliable parking mechanism. It can not be used as a brake mechanism, its a gear like ring on a splined shaft which when engaged, slides into a grooved recess of the transmission case. This locks the output shaft which in turn locks the entire drive line. Engaging that at highway speeds would mean catastrophic transmission and/or drive line failure.

      I bet most people in the U.S. never bother setting it when the car is parked, heck, many of them I'm sure wouldn't know where it is or how to use it in an emergency. There's a "P" setting on the shifter, that's good enough :/

      What was the point of making that statement? To be a snobby jerk off and put down Americans when ever you can? Is it fashionable where you come from? The parking pawl is more reliable than a mechanical cable activated parking brake. One the ring locks the drive shaft it is not rolling anywhere. A cable actuated emergency/parking brake can come out of adjustment and also suffer from a failed cable. It is not necessary to use on an automatic. I happen to use it on hills as a backup to prevent the weight of the vehicle from binding the parking pawl.

      And an example: I purchased a forklift that weighed 8000 lbs. I hauled it on a 3000lb trailer and towed it with a ~6000 lb automatic vehicle. All together it weighed around 17,000 pounds or 7,700 kg. I stopped at a friends house and decided to stay the night, problem was his house was on a hill and I could not fit the rig into his driveway. I set the parking brake and tested to see if it would hold, it didn't. 7700kg on a steep hill was just too much for it, it crept forward little by little. I put the automatic transmission in park and it held perfectly.

    9. Re:Many possibilities by Joce640k · · Score: 3, Informative

      Go ahead and try it next time you're cruising along. No, seriously. At best you'll get bad smell from the mechanism. It won't slow you down worth a damn.

      While you're at it: Try stomping on the brakes when nobody else is around, just to see what happens. That way you'll know what to expect in a bad situation.

      Stuff like this is called "learning to drive".

      --
      No sig today...
  4. What could possibly go wrong by Anonymous Coward · · Score: 4, Funny

    I was going to say something, but I can't think of anything clever, because I'm shaking my head in disbelief so fast that I'm getting dizzy. Please tell me that the wireless interface at least has its own fuse that can be pulled.

    1. Re:What could possibly go wrong by c0lo · · Score: 4, Funny

      Please tell me that the wireless interface at least has its own fuse that can be pulled.

      On behalf of our R&D dept in East Europe and Russia, I can state that we don't know it ... yet. And, unless you aren't a Mercedes owner, we are not going to inform you.
      If, however, you own this model, just tell us where it is parked and we'll let you know (if a fuse can be pulled, it's likely we can replace it with absolutely no troubles for your, while you're asleep).

      Raising my black hat, I send you my best wishes and hopes of a successful ...(ummm... how to put it?... ah, yes...) collaboration,

      (non-readable signature in 133t-sp34k)

      --
      Questions raise, answers kill. Raise questions to stay alive.
    2. Re:what could possibly go wrong by digitig · · Score: 4, Funny

      Soon: - First maleware for cars spotted in the wild. Car manufacturers: "No problem. it only infects the multimedia system" - Maleware displays a huge kitty on the HUD. First malware caused traffic accident with casualties.

      I think auto manufacturers are waking up to the fact that women buy cars too.

      --
      Quidnam Latine loqui modo coepi?
  5. what could possibly go wrong by Anonymous Coward · · Score: 5, Interesting

    Soon:
    - First maleware for cars spotted in the wild. Car manufacturers: "No problem. it only infects the multimedia system"
    - Maleware displays a huge kitty on the HUD. First malware caused traffic accident with casualties.
    - Anti-Virus Software mandatory for cars
    - Kaspersky/McAffee/.. : ~40% of all cars infected with one virus or another....

  6. Well Mercedes are a favourate of bankers by Chrisq · · Score: 4, Funny

    Well Mercedes are a favourate of bankers and corporate "fat cats". I couldn't think of a better challenge to Anonymous. Speed limiter to 20mph? Stuck in the driveway? I wait with eagerness.

    1. Re:Well Mercedes are a favourate of bankers by FunPika · · Score: 3, Interesting

      20 miles per hour speed limiter? How about limit it to just under the speed limit (since GPS's seem to be able to get that these days). It will effectively piss off people in a lot of areas such as Massachusetts (I have gotten passed on a double yellow there for going slightly over the limit...don't underestimate how much this would piss off Massholes). The 20mph limiter would just make the driver be like "FUCK THIS!", a GPS based limiter could troll the driver and everyone around them in the right areas, at least for a little while.

      --
      After years of not using a signature, I am going to make one to say the following: Fuck Beta
    2. Re:Well Mercedes are a favourate of bankers by SuricouRaven · · Score: 4, Funny

      Set to play Never Gonna Give You Up at random intervals, and disable audio controls for the duration.

  7. Re:Who pays? by gl4ss · · Score: 4, Informative

    mercedes.
    or in other words - the guy who buys the car. if you could hack that data connection to contact whatever else sites though.. I'm assuming it would do it via 3g actually too. it wouldn't be too hard for mercedes to negotiate europe wide contracts for it for fairly cheap(the data amounts will be rather low). so it might be something like 200 bucks for 3 years of updates, which considering the total cost of the car isn't really that much. if it can prevent one recall for a model that would otherwise need the dealer to do "free" work billed to mb then from mb's viewpoint it's a good deal.

    --
    world was created 5 seconds before this post as it is.
  8. Sometimes, It's Good To Be Old-School by longbot · · Score: 5, Funny

    No automatic updates for me, unless Mercedes wants to install a computer to update in my '84 300TD.

    --
    I don't suffer from insanity, I enjoy every minute of it! --Longbottle
  9. Turn on the CU? by sirdude · · Score: 3, Interesting

    "In a process called ‘reflashing,’ the Mercedes system can turn on the car operating system (CU), download the new application, then cut itself off."

    So the car is regularly polling a server and can switch itself on? That sounds decidedly unsettling.

    Could somebody elaborate on the diagnostic capabilities of these cars? Do they alert you if your brakes are inefficient or if your tyres are wearing out? I'm too poor to afford one to know :(

    Cheers.

    1. Re:Turn on the CU? by MachineShedFred · · Score: 3, Insightful

      If it works like the iDrive system in BMW, the ECU stays active for about 10 minutes after the car is turned off, in order to remember navigation position and the creature comfort stuff like heated seats being turned on. Mercedes is likely putting this update check in after such an interval.

      As for the brake and tire wear checking, that's done by a Mark-I eyeball installed in a service technician at the dealership, which is included in the service plan that comes with the car.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
  10. Virus scan on Cars by million_monkeys · · Score: 5, Funny

    Soon: - First maleware for cars spotted in the wild. Car manufacturers: "No problem. it only infects the multimedia system" - Maleware displays a huge kitty on the HUD. First malware caused traffic accident with casualties. - Anti-Virus Software mandatory for cars - Kaspersky/McAffee/.. : ~40% of all cars infected with one virus or another....

    Great, so now my car's only gonna go 15 mph because McAffee is using 90% of my engine resources.

  11. Best scenario... by DrogMan · · Score: 4, Funny

    So you're the getaway driver sitting in the stolen Merc - your partners in crime are runing towards you. You hit the 'start' button... "Please wait while we install the latest software update. This process will take approximately 5 of your finest German minutes." Fantastic!

  12. Re:Transparent upgrades - yeah, right by Swampash · · Score: 3, Funny

    Remember how you could always spot a Microsoft "Patch Tuesday" when you got to work and found all the desktop machines had rebooted overnight?

    Spotting Mercedes Patch Tuesday on the autobahn is going to be epic.

  13. Avi Rubin hacking cars. TED.com by Leafwiz · · Score: 4, Interesting

    Hacking cars has already been done, and is shown here in this ted.com video. 4:42 is where he explains about it.

    http://www.ted.com/talks/avi_rubin_all_your_devices_can_be_hacked.html

    Many of the internal systems was hacked, including the system for breaking.

    From ted.com:
    "Could someone hack your pacemaker? At TEDxMidAtlantic, Avi Rubin explains how hackers are compromising cars, smartphones and medical devices, and warns us about the dangers of an increasingly hack-able world.

      Avi Rubin is a professor of computer science and director of Health and Medical Security Lab at Johns Hopkins University. His current research is focused on the security of electronic medical records"