Hackers Reveal Nasty New Car Attacks

← Back to Stories (view on slashdot.org)

Hackers Reveal Nasty New Car Attacks

Posted by samzenpus on Thursday July 25, 2013 @08:00AM from the unsafe-at-any-speed dept.

schwit1 writes "Stomping on the brakes of a 3,500-pound Ford Escape that refuses to stop–or even slow down–produces a unique feeling of anxiety. In this case it also produces a deep groaning sound, like an angry water buffalo bellowing somewhere under the SUV's chassis. The more I pound the pedal, the louder the groan gets–along with the delighted cackling of the two hackers sitting behind me in the backseat. Luckily, all of this is happening at less than 5mph. So the Escape merely plows into a stand of 6-foot-high weeds growing in the abandoned parking lot of a South Bend, Ind. strip mall that Charlie Miller and Chris Valasek have chosen as the testing grounds for the day's experiments, a few of which are shown in the video below. (When Miller discovered the brake-disabling trick, he wasn't so lucky: The soccer-mom mobile barreled through his garage, crushing his lawn mower and inflicting $150 worth of damage to the rear wall.) The duo plans to release their findings and the attack software they developed at the hacker conference Defcon in Las Vegas next month–the better, they say, to help other researchers find and fix the auto industry's security problems before malicious hackers get under the hoods of unsuspecting drivers."

70 of 390 comments (clear)

Min score:

Reason:

Sort:

High risk by suso · 2013-07-25 08:00 · Score: 4, Insightful

"The duo plans to release their findings and the attack software they developed at the hacker conference Defcon in Las Vegas next month–the better, they say, to help other researchers find and fix the auto industry's security problems"
As a security researcher who believes in the spirit of the open release of vulnerabilities, I feel that this is irresponsible behavior on the part of these security researchers. We're not talking about releasing a vulnerability that will compromise someone's e-mail. We're talking about a high risk vulnerability that could cost some random person their life. These two gentleman should take a deep breath before releasing this information to the computer industry first rather than the auto industry. The auto industry may not have a tradition of attending these types of conferences and so by releasing the information at Def-con you're giving the wrong people a head start. Sure, the auto industry already knows about these problems, but you have to try to give them the benefit of the doubt when you confront them about the problems that they will try to fix it.
1. Re:High risk by Xaedalus · 2013-07-25 08:11 · Score: 5, Interesting
  
  The mere fact that this has been announced has already started the wrong people working on it. At this point, releasing at Def-Con is the right thing to do, because not only will that patch get fixed, but others will come to similar conclusions and keep an eye out for peers who are going to exploit this. Black hats have family too.
  
  --
  Here's to hot beer, cold women, and Glaswegian kisses for all.
2. Re:High risk by Anonymous Coward · 2013-07-25 08:12 · Score: 5, Insightful
  
  Right now they have to hook directly into the odb plug to do this, the same person with that kind of physical access can do any number of nasty things to your car.
  They are more warning about the lack of security when this stuff becomes accessible remotely (cellular or otherwise wireless) that there are going to be serious security issues as anyone breaking into that remote access path can do serious things.
3. Re:High risk by nitehawk214 · 2013-07-25 08:12 · Score: 2
  
  I feel that this is irresponsible behavior on the part of these security researchers.
  Because we all know that if the researchers quietly tell the auto manufacturers they will fix the issues and make sure everything gets updated. Our upstanding auto manufacturers would certainly not try to bury issue and sue the reporters out of existence!
  As a security researcher you should be used to companies trying to deny, bury and ignore reports instead of correct them.
  Seriously, the only way to get a company to fix a flaw is when the pr nightmare becomes so great that it is cheaper to fix the problem than deny it.
  
  --
  I'm a good cook. I'm a fantastic eater. - Steven Brust
4. Re:High risk by chuckinator · 2013-07-25 08:12 · Score: 2
  
  While your argument has merit, I'm going to simply stick to the strategy of buying cars that do not attach a wireless communication device to the same bus that the engine control unit sits on.
5. Re:High risk by dyingtolive · 2013-07-25 08:13 · Score: 3, Insightful
  
  Or the attacker just cut your brake lines.
  
  That's not a hack though, more of a snip.
  
  --
  Support the EFF and Creative Commons. The war is coming, and they're supporting you...
6. Re:High risk by viperidaenz · 2013-07-25 08:14 · Score: 3, Insightful
  
  Once someone has physical access to a vehicle, there are worse things they can do than mess with the traction control and abs systems.
7. Re:High risk by mrex · 2013-07-25 08:20 · Score: 2
  
  As a security researcher who believes in the spirit of the open release of vulnerabilities, I feel that this is irresponsible behavior on the part of these security researchers.
  Then you don't believe in the spirit of full disclosure at all. What drivers have now is security through obscurity, which as we all know is no security at all. Significant public awareness of the problem will create the kind of pressure on auto makers to issue recall notices and fixes for life-endangering safety issues. Full disclosure is essential here for precisely the reason that you say means it shouldn't happen: because lives are at stake.
8. Re:High risk by Anonymous Coward · 2013-07-25 08:21 · Score: 5, Interesting
  
  You mean like if there was some embedded computer plugged into the same CANbus as the OBD port, that had a cellular radio on it that was already shown to be vulnerable to attack? One sold on every new car from a certain major manufacturer?
  Yeah, in the future, when OnStar exists, there will be serious issues. Wait, was "future" the right word?
  The underlying problem is that CANbus was designed by automotive engineers and not network security people.
9. Re:High risk by Anonymous Coward · 2013-07-25 08:22 · Score: 2
  
  I thought of the same thing. The one significant difference is, cut the brake line and it will be noticed at 5MPH pulling out of the driveway. This would allow the hacker to only make the brakes fail at 65 MPH.
10. Re:High risk by radiumsoup · 2013-07-25 08:23 · Score: 3, Insightful
  
  You speak as if all companies are equally bad. Somehow, I think you're either young or more sheltered than you believe you are.
11. Re:High risk by Joining+Yet+Again · 2013-07-25 08:31 · Score: 3, Insightful
  
  Argh, sophomores everywhere.
  Security through obscurity isn't "no security at all". It's just inadequate. There's still the hurdle of overcoming obscurity.
  Just like strong cryptography is great but not perfect because 1) implementation is often flawed; 2) rubber hose.
12. Re:High risk by HornWumpus · 2013-07-25 08:32 · Score: 4, Interesting
  
  Honda and Accura nav systems are also apparently hooking into the OBD port. They report codes on the nav screen, can't (or won't) clear them.
  
  --
  John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
13. Re:High risk by HornWumpus · 2013-07-25 08:33 · Score: 3, Informative
  
  OBDII is not wireless.
  
  --
  John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
14. Re:High risk by Anonymous Coward · 2013-07-25 08:45 · Score: 5, Insightful
  
  But the engine controller is going to have some form of authentication required and the hackers are going to be stopped right there.
  Yes, I too had noticed that authentication systems were 100% proof against hackers, especially those implemented by companies that obviously have no prior interest in security.
15. Re:High risk by khasim · 2013-07-25 08:45 · Score: 2
  
  Security through obscurity isn't "no security at all". It's just inadequate. There's still the hurdle of overcoming obscurity.
  No.
  Security is not about becoming invulnerable. That is impossible. Security is about reducing the number of people who can EFFECTIVELY attack you.
  Security-Through-Obscurity does NOTHING to improve the existing security model of the system BUT IT DOES PROVIDE A WAY TO BYPASS THE EXISTING SECURITY MODEL.
16. Re:High risk by suso · 2013-07-25 08:49 · Score: 4, Insightful
  
  Because we all know that if the researchers quietly tell the auto manufacturers they will fix the issues and make sure everything gets updated. Our upstanding auto manufacturers would certainly not try to bury issue and sue the reporters out of existence!
  As a security researcher you should be used to companies trying to deny, bury and ignore reports instead of correct them.
  Seriously, the only way to get a company to fix a flaw is when the pr nightmare becomes so great that it is cheaper to fix the problem than deny it.
  Yes and I also know about technically minded people denying that problems are real issues too (See libvte vulnerability). DARPA has known about these issues for a while now and apparently the issues are a lot more real and scary than most people realize. We're talking about the ability for a hacker to do something to your car simply by playing a song over your iPod or on a CD. Or a program being injected the next time you get an oil change because the service center's computer had been hacked remotely.
  And we're not talking about ego maniac hackers sitting in their basements causing a few cars to honk their horn because they think it will be funny, we're talking about terrorists and countries writing a song that one day everyone plays one day and we have 1 million 60mph 2 ton missles with families in them flying up the road all the same time. That will be a very bad day. But that's ok, because we tried to tell the auto manufacturers and they just didn't listen, so its their fault right?
  What these researchers are doing here is treating this vulnerability as if its any other vulnerability, which its not. Human life is at stake, not your email or bank account password. Yes, they do recognize the dangers, but they don't seem to realize that they should be changing their approach accordingly. For instance, they do their tests out in the open on public roads and put someone behind the wheel who doesn't know what is going to happen. You don't really need to do that to demonstrate that there is a problem.
17. Re:High risk by chiefmojorising · 2013-07-25 08:50 · Score: 3, Insightful
  
  Seriously. I've got a hack that'll disable the brakes on any car ever made. It's called a hacksaw (heh) and requires even *less* access than these guys had.
18. Re:High risk by suso · 2013-07-25 08:57 · Score: 5, Insightful
  
  And what cars are those?
  Me, I stay safe and only drive cars with carburetors.
  Until one of the hacked cars hits you head-on at 60 mph.
19. Re:High risk by dgatwood · 2013-07-25 08:59 · Score: 4, Interesting
  
  While your argument has merit, I'm going to simply stick to the strategy of buying cars that do not attach a wireless communication device to the same bus that the engine control unit sits on.
  As for me, I'm going to stick to buying cars in which the brake master cylinder is physically depressed by the pedal, and in which the emergency brake lever is physically connected with a mechanical cable....
  I drove a rental car the other day with an electronic emergency brake. I've never been more uncomfortable driving a vehicle. Besides having "safety" features that made it really clumsy to drive (you can't release the emergency brake unless your foot is on the brake pedal, for example, which doesn't make any real sense if the vehicle is in a flat parking space, with the transmission in Park), I just can't see myself ever trusting a car in which a computer failure could kill the emergency brake entirely, and in which there's no way to apply more force on the emergency brake in the event of an actual emergency. That design pretty much defeats the whole purpose of having an emergency brake.
  Ugh.
  
  --
  Check out my sci-fi/humor trilogy at PatriotsBooks.
20. Re:High risk by Roskolnikov · 2013-07-25 09:00 · Score: 4, Insightful
  
  unless you add a wireless dongle (they come in Bluetooth and wifi but they still require physical access and close proximity).
  every person that has done a 'reflash' on their car to get more performance has done similar things, I can with the right parameters make my cars motor throw a connecting rod through the block, I don't consider this hacking, I consider it sky is falling stupidity... if they had done this through on-star, now that, I would consider hacking and truly the danger that should be exposed by this article.
  
  --
  Unix, an obscure operating system developed by bored researchers in an attempt to get a better game playing experience.
21. Re:High risk by h4rr4r · 2013-07-25 09:05 · Score: 2
  
  I will notice that when pulling out of the driveway, and just have the car towed to the shop.
  The lock up brakes at random on single wheels at 75 mph hack is a lot scarier.
22. Re:High risk by Solandri · 2013-07-25 09:06 · Score: 2
  
  It shouldn't really be considered high risk. Brakes are important enough that engineers designed in a second redundant braking system. The parking brake is still connected to the brakes by a steel cable. It will work even if the electronics or hydraulics on the brake pedal fails.
  
  The problem is most drivers don't know that it's a redundant system, and never think of trying the parking brake if the brake pedal fails. This is one area where linguistic drift has hurt us. They were originally called the emergency brake, whose name clearly implies they're to be used in an emergency if the regular brakes fail. But since they were also used to keep manual transmission cars from rolling when parked, they've colloquially been called parking brakes. To the point where most people refer to them as parking brakes now and don't know about their emergency braking function.
23. Re:High risk by iamgnat · 2013-07-25 09:25 · Score: 3, Interesting
  
  Then you've never heard of the CAN bus, which is in use on every car produced since 1996. You'd have to avoid anything with obvious wireless access, which means no lock/unlock/panic/remote start systems, and likely not even a car radio since many are on the bus as well.
  No, ODB-II was mandated on every new car sold in the US starting in 1996. CAN didn't gain mass adoption for quite a while yet (I have a 2001 with out it and just replaced a 2004 not too long ago that didn't have it).
  All of the things you listed as not being possible without CAN were also around long before CAN (and well before ODB-II (though entirely unrelated) was mandated).
  Even for the cars that are built today, there are still a fair number that do not have any wireless access to the bus (e.g. cars without OnSTAR or the like). I just bought one in fact. The wireless access was his concern and he still has plenty of options to avoid that while still having all the other benefits of a CAN based car.
24. Re:High risk by WaffleMonster · 2013-07-25 09:28 · Score: 3, Insightful
  
  Right now they have to hook directly into the odb plug to do this, the same person with that kind of physical access can do any number of nasty things to your car.
  TFA asserts otherwise. Apparently onstar and integrated infotainment systems can obtain same access to CAN bus access as the OBD port.
  
  They are more warning about the lack of security when this stuff becomes accessible remotely (cellular or otherwise wireless) that there are going to be serious security issues as anyone breaking into that remote access path can do serious things
  "When this stuff" ??? This is 2013.
25. Re:High risk by Charliemopps · 2013-07-25 09:33 · Score: 3, Insightful
  
  Uh... it's already being exploited...
  http://news.yahoo.com/blogs/lookout/hastings-crash-witness-113514329.html
26. Re:High risk by Jane+Q.+Public · 2013-07-25 09:43 · Score: 2
  
  "Incidentally, that apparently was used for a time as example of the "correct" decision in Business Ethics classes, since it maximized shareholder value."
  True. But later, it was used in college classes as a classic example of what NOT to do. I know, because that's where I learned about it.
  
  In subsequent years it has also made up whole chapters in books about why things fail.
  
  Because: once word of that board decision got out (and it always does), people simply stopped buying Pintos. It's that simple. Their effort to save a buck cost them many many millions of dollars, and if it weren't for Ford pickups, it is arguable that it could even have brought the company down. It rallied, as we know, but there was a time when things were pretty iffy.
27. Re:High risk by icebike · 2013-07-25 09:43 · Score: 2, Informative
  
  Nothing in that story says anything about a hacked car.
  
  --
  Sig Battery depleted. Reverting to safe mode.
28. Re:High risk by EvanED · 2013-07-25 09:47 · Score: 2
  
  So far they need physical access. Onstar and Hyundai's similar thing likely make decent remote access points.
  Good guess: it's been done.
  Here's a video if you don't like reading. There's a video of using the telematics vulnerability (e.g. OnStar) to "steal" a car later, though unfortunately it seems that the important bits of that video are censored for the YouTube video. (The same presenter gave a faculty candidate talk here and it was not censored in that version of the presentation.)
29. Re:High risk by the_other_chewey · 2013-07-25 10:00 · Score: 2
  
  That design pretty much defeats the whole purpose of having an emergency brake.
  Ugh.
  You might be shocked to learn that cars don't actually have emergency brakes.
  This mechanical lever thingy was never intended to be one, and you won't find
  the word "emergency brake" in a (modern) car's manual.
  
  It's one o those self-perpetuating myths.
  
  It's a parking brake.
30. Re:High risk by LinuxIsGarbage · 2013-07-25 10:24 · Score: 3, Insightful
  
  The problem is most drivers don't know that it's a redundant system, and never think of trying the parking brake if the brake pedal fails. This is one area where linguistic drift has hurt us. They were originally called the emergency brake, whose name clearly implies they're to be used in an emergency if the regular brakes fail. But since they were also used to keep manual transmission cars from rolling when parked, they've colloquially been called parking brakes. To the point where most people refer to them as parking brakes now and don't know about their emergency braking function.
  It's also referred to as a hand-brake (especially outside of North America where front bench seats with foot operated e-brakes where not near as popular). I've heard of people trying to use it in an emergency, a panic stop situation. In which case it's far worse than the service brakes, unless the service brakes have failed.
  The truth is a frightening number of people don't understand how the cars they're driving work, and it's not just limited to e-brake / p-brake / h-brake, and it's not due to the name. Many don't understand basic concepts of gears, how and when to use manual modes of an automatic, how to shift into neutral or kill the ignition in the case of a stuck throttle. A shocking number of people don't understand that an oil light means a loss of oil pressure and the car should be pulled over and shut off immediately. A shocking number of people don't know how to jump-start a car, or change a flat, or check / adjust their tire pressure, or oil / tranny / brake / power steering fluid. A shocking number don't know that a quick blinking turn signal means you have a turn signal bulb out.
31. Re:High risk by lennier · 2013-07-25 10:43 · Score: 5, Insightful
  
  The underlying problem is that CANbus was designed by automotive engineers and not network security people.
  A good point. Another way of phrasing the problem I think is:
  Systems are too often specified, designed and tested entirely in terms of their positive capabilities, rather than their negative capabilities. In the networked remote security environment, we need a design process that guarantees both.
  In other words, most of our design process up to now has been all about "what a system CAN DO". But securing a system from to intelligent attackers is about what that system CAN'T do, even in the worst case. And since the number of things a Turing-complete computer with an always-on connection to the Internet CAN buut SHOULDN'T do is potentially infinite, that can be really difficult.
  Tests generally only cover the positive features. It's hard to achieve complete test coverage by trying every possible combination of bad input (though fuzzers seem to be doing quite well at finding vulnerabilities, and it's embarrassing that amateurs keep finding bugs that the professional developers didn't.) Typing seems to be more useful in limiting capability, but our current type systems are very limited - for example, in most OO languages, the type system only guarantees that the call signature of a method is correct; it doesn't give any way of describing any other invariants that should be preserved during the computation; and the entire architecture of OOP is based on methods with side-effects which scales really badly to concurrent processing.
  I think we've reached the limit of what can be safely achieved with loosely-typed imperative side-effectful OO languages like C++. These languages give us enormous power to create positive capability, but very little in the way of assuring negative capability. I'd like to think that Haskell or Erlang might be a way forward, but I've yet to wrap my head around either of them. I'm hoping we can eventually get something simpler, that allows creativity where it's needed but also lets us place hard limits on what unexpected interactions can arise.
  
  --
  You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
32. Re:High risk by kasperd · 2013-07-25 11:16 · Score: 2
  
  You speak as if all companies are equally bad. Somehow, I think you're either young or more sheltered than you believe you are.
  When I was young and naive, I thought if I discretely told companies about security problems in their products, they would thank me and fix it. In reality that has never happened in any of the cases, where I have reported a security problem to a company.
  
  In the real world the majority of companies will do nothing about a security bug unless they face an immediate threat of the information becoming public. As a security researcher, it is sensible to assume any company will behave like that, until proven otherwise.
  
  This puts the few companies, which takes security seriously, in a bad position. They have to differentiate themselves from the rest of the industry to even get security researchers to take them seriously. One way to differentiate yourself is by offering bug bounties. The added benefit from offering bug bounties is that the company get to set rules about disclosure which must be followed to qualify for a bounty.
  
  --
  
  Do you care about the security of your wireless mouse?
33. Re:High risk by AJH16 · 2013-07-25 11:31 · Score: 4, Interesting
  
  Apparently in their test case, the telematics unit did have access to all 3 speeds of network. That's really goofy since it shouldn't need access to all the networks. Basically CAN buses have 3 speeds of network, a low, medium and high speed network with different types of data on each. TPMS for example is generally low, ABS is normally high speed and your typical error codes and car locks and a lot of the status reporting is on the medium speed. Many ODBII connectors won't connect to multiple of the networks unless you get more expensive units and internally not all components in the vehicle are capable of talking on all of the networks.
  
  --
  AJ Henderson
34. Re:High risk by adolf · 2013-07-25 11:38 · Score: 4, Informative
  
  It's already a risk. And it's cheap.
  Plug a GSM modem into an RS-232 ODB2 interface.
  Programming it is really hard, and stuff: ATS0=1&W
  Power is even harder: Ignition-switched power is supplied by the ODB port.
  Using it is perhaps the most difficult part: Call the modem, it answers and connects, and...done.
  Yeah, sure: I can do all kinds of obvious and nefarious things to a car if I have physical access to it.
  But this way, I can have the car work perfectly normally for a week or a month or whatever.
  And then, long after they forget about having their window smashed and the change holder looted in the middle of the night, I can have it misbehave at exactly the moment that it is perhaps most dangerous.
  Just sayin'.
  
  --
  Kid-proof tablet..
35. Re:High risk by JWSmythe · 2013-07-25 13:18 · Score: 4, Insightful
  
  Apply Occam's Razor. User or mechanical failure are much more likely than his car being hacked.
  The story talks about a *wired* port by the parking brake. That would mean the attacker was in the car, or a remote device was attached, which investigators would (or at least could) find. It also only addresses a specific Ford vehicle, which has no relationship to a Mercedes.
  Significant user failure would seem to be present. Options are available when the brakes don't work. Downshift. Turn off the key, let the engine stop, turn the key on to unlock the steering wheel. Spin the car. Even hard maneuvering will bleed speed off. Ask any racer. Turn the key off, let the steering wheel lock, and have a slower speed impact into a fixed object.
  The option of driving as fast as possible, and dying in a fireball is the poorest choice. A conspiracy is one the must unlikely scenarios, only slightly better than alien abduction/intervention, and poltergeists taking over the car.
  I'm kind of fond of the alien theories.
  If it were the feds, wouldn't it be easier to pay a thug to do a random carjacking? A home invasion gone wrong? Shot by SWAT in a drug raid at the wrong address? There are a million other ways to remove someone without needing a high tech solution that doesn't exist yet.
  
  --
  Serious? Seriousness is well above my pay grade.
36. Re:High risk by JWSmythe · 2013-07-25 13:29 · Score: 2
  
  The most popular local real-time traffic data comes over FM radio. Well, a sideband. RDS-TMC. There are other more difficult. The most destructive thing you could do with it is to try to overpower the legitimate signal, and broadcast that all major intersections are closed. Area wide gridlock is much different than taking remote control over a vehicle.
  
  --
  Serious? Seriousness is well above my pay grade.
37. Re:High risk by Ol+Olsoc · 2013-07-25 13:38 · Score: 4, Informative
  
  TFA asserts otherwise. Apparently onstar and integrated infotainment systems can obtain same access to CAN bus access as the OBD port.
  Onstar can do many things to your car outside your control. Remember when they were bragging about how they could disable your car if someone stole it? It worked by disabling the throttle, forcing the vehicle to idle, so the perp would pull over to the side of the road. My guess is that if they can do that, they can controll a whole lot more. They can remote diagnose car issues, so that means they access things like timing, engine temps, vacuum lines, no doubt much more. And if they can read them? Who knows?
  And you don't even need to subscribe! http://www.consumeraffairs.com/news/gm-includes-free-remote-start-on-2014-models-060713.html
  How about that? They can start your car remotely. Umm, that means they can stop it remotely.
  How about this? They track you for free, and sell the data. Of course you are anonymized. Until you aren't.
  http://www.wired.com/threatlevel/2011/09/onstar-tracks-you/
  
  --
  The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
38. Re:High risk by Jah-Wren+Ryel · 2013-07-25 15:32 · Score: 3, Insightful
  
  If it were the feds, wouldn't it be easier to pay a thug to do a random carjacking? A home invasion gone wrong? Shot by SWAT in a drug raid at the wrong address?
  I'm not going to speak to the larger question of how true the theory is, but to this question there is a good reason why not. If they can make it look like the crash was completely the driver's fault then that would eliminate any question of it being a government hit. All those other options involve third parties that, exactly as you postulated, could be hired to do the hit.
  
  --
  When information is power, privacy is freedom.
39. Re:High risk by Anonymous Coward · 2013-07-25 15:47 · Score: 2, Informative
  
  Security through obscurity isn't "no security at all". It's just inadequate. There's still the hurdle of overcoming obscurity.
  No.
  Yes.
  If you're going to go around parroting Bruce then at least get it right. What he said was that relying ONLY on obscurity is foolish, because once the secret it out it no longer provides protection.
40. Re:High risk by fisted · 2013-07-25 15:53 · Score: 2
  
  Yeah that will sure seem legit and everyone will just stop their cars and assume fetal position.
  
  --
  CLI paste? paste.pr0.tips!
41. Re:High risk by adolf · 2013-07-25 19:35 · Score: 2
  
  That works. The protocol is fairly ancient, and therefore small. It'd be easy to shove an MSP430, properly programmed along with a 7803 and a glue chip to straighten out the IO voltage on a chunk of protoboard behind the dash. Cost? Close to nothing. Wrap it in 3M tape (600V insulation <i>per layer!</i>), connect it with Scotchloks for an easy/fast install and if you program the '430 right, the ODB port still works when you take the car in for normal service. (Perhaps unfortunately, it's just code. The Internet is very good at replicating code.) Speaking of code: Nobody really drives 150 miles/hour. If you want mayhem, try this: If Engine_Started > 1000 and Brakes > 50%-over-15 seconds Disable Brakes() Increase Speed() Wheel 15~30% Right() Sleep 5~10s Wheel 15~30% Left() INCREASE SPEED() Wheel 15-30% Right() Until Speed < 5, Brake 100% Reverse() [goto...] Now you're running down little Johnny and Sally as the soccer mom plows around the schoolyard in semi-random circles when she's just picking up the tots from school. Or destroying a normal shopping mall. Or maybe a neighborhood with a bit of construction and/or traffic. Or making a complete mockery out of a traditional traffic jam. Oh, and: I almost forgot. TFV was about a Prius. It, famously, has a start button instead of a normal ignition switch. Somewhere in the pseudo-pseudo code should be: Disable Shutdown()
  
  --
  Kid-proof tablet..
42. Re:High risk by AmiMoJo · 2013-07-25 21:29 · Score: 3, Interesting
  
  CANbus is quite old, originally specified back in 1986. It is designed primarily for robustness in a noisy automotive environment. Back then there was no OBD, no internet, no mobile phone network. It's hard to see how the designers could have predicted all that and designed in security based on algorithms that had not been invented at the time.
  Security could be added now but it would push up costs a lot. Most CANbus devices are very simple embedded systems, and there are hundreds of them in a modern car.
  The problem is that the CANbus and everything attached to it should never have been made externally accessible. Forget physical access, once you have that there is nothing you can really do, it's the systems like OnStar that allow remote access which are the problem.
  
  --
  const int one = 65536; (Silvermoon, Texture.cs)
  SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
43. Re:High risk by pla · 2013-07-26 01:56 · Score: 4, Insightful
  
  Downshift.
  Does nothing on an automatic until your speed drops below an appropriate threshold. Even reverse won't engage until you come to a stop. Park theoretically jams the output shaft with a pawl, but even that can't "catch" above a certain (very low) speed.
  
  Turn off the key
  Many new cars (Priuses, for example) don't have mechanical keys, just a button that even under the best of conditions doesn't always do quite what you want it to - Hold it just a hair too long or too short, or have the car in the wrong gear for what you want to do, and it just laughs at you.
  
  Spin the car.
  At 80MPH, "spinning" the car means flipping the car, and will likely get you just as killed as the "brick wall" method of decelerating.
  
  Even hard maneuvering will bleed speed off.
  This one really will always work, but as with spinning, careful just how hard you maneuver at high speeds.
  
  Overall, Sorry for the negative tone I have here, because I completely agree with you in spirit. If the driver doen't panic, he can do a lot to slow down a car with no brakes and/or a stuck accelerator. Most people don't expect that to happen, though, and simply go into a mental freeze, stomping uselessly on the brakes harder and harder rather than taking other corrective measures. As you say, "Significant user failure would seem to be present".
44. Re:High risk by sjames · 2013-07-26 04:16 · Score: 2
  
  That would be an acceptable solution.
  It would also mean our cars have a 'prefix code' like a starship in the Trek universe :-)
Locking down the cars for security by IndustrialComplex · 2013-07-25 08:05 · Score: 4, Insightful

I can appreciate applying Anti Tamper and other IA techniques to 'harden' cars, but I hope this doesn't return us to where only ''licensed' repair facilities can work on cars.

--
Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
1. Re:Locking down the cars for security by jittles · 2013-07-25 10:26 · Score: 2
  
  I can appreciate applying Anti Tamper and other IA techniques to 'harden' cars, but I hope this doesn't return us to where only ''licensed' repair facilities can work on cars.
  That would be illegal as the Federal Legislature has mandated that all cars must have certain info publicly available via the ODB-II port (1995 and above). So unless that law were repealed or amended, they cannot restrict access to the functionality dictated by that law.
Re:This is why my car is airgapped by pegr · 2013-07-25 08:14 · Score: 2

OF COURSE if you give real-time access to the OBD-II port, you can have all kinds of shenanigans. So don't do that!
How many people would notice an ODB-II Bluetooth adapter plugged into the port? http://www.amazon.com/Soliport-Bluetooth-OBDII-Diagnostic-Scanner/dp/B004KL0I9I
Meh... Give me access, I own your computer by Mr+Krinkle · 2013-07-25 08:17 · Score: 5, Insightful

So
if I'm sitting in your car, plugged in to the canbus, I can control things on the canbus....
Yeppers....
Just like if I have access to your laptop for long enough, I can get whatever is on it. (encryption will slow it down, but like I said, given time and access?)
But you'll probably notice me sitting in your car, plugging a cord into the port before I take the time to crash your car, with me riding in it.....
While this is amusing, I'm not that nervous about "security through not having some donkey plug his laptop in your car with a death wish while you are hurtling down the highway"
Having them use the "open" canbus specs, you can add aftermarket devices, and not have to take your car to the dealer for any service.
If they fully lock it down, the dealer will be the ONLY place that could work on it. And the ONLY parts you could add to your car.

--
I am 31337 or something.
Accura/Honda Door-lock Exploit by bradgoodman · 2013-07-25 08:20 · Score: 3, Interesting

While they're at it - I don't think anyone has really discovered what the deal was with the Accura/Honda remote-control doorlock gadget that thieves were reportedly using to effortlessly break into cars. All the article said was "police are stumped" (duh).
1. Re:Accura/Honda Door-lock Exploit by PPH · 2013-07-25 09:12 · Score: 2
  
  Phony unlock gadgets will be offered on the black market for big bux to wanna-be car thieves. In reality, the guy in the video has the car's original RF key fob in his pocket. Or his buddy has it just off screen. The magic box unlocks the luxury car on YouTube and orders roll in.
  Who are you going to call when that $500 gizmo turns out to be a battery, pushbutton and red LED? The consumer protection agency?
  
  --
  Have gnu, will travel.
Not News: They put it into brake service mode. by Anonymous Coward · 2013-07-25 08:23 · Score: 3, Interesting

To enter the Pad Service Mode, perform the following with the vehicle stationary:
1. Place the vehicle in Park and turn the ignition to the ON position.
2. Apply the brake pedal.
3. Turn the ignition OFF, then ON three times and then release the brake pedal. The total time elapsed for the three ignition cycles and brake release must be less than 3 seconds.
That's how you replace the brake pads. If they figured out how to do it through the OBD connector, whooptie do.
I have one of these vehicles. Fly-by-wire regenerative brakes are a little creepy, but supposedly if something goes wrong and you mash the pedal all the way to the floor, there's a hydraulic backup down there somewhere. I haven't had to try it.
Oh, and all this is no different than your holier-than-thou Toyota Prius, so don't blame Ford.
Re:So? by mrex · 2013-07-25 08:25 · Score: 3, Interesting

So they had hard-wired physical access to the car's data network and they were able to cause trouble? News at 11! (aka so what?)
So what? So I could bump key my way into your car, trojan one of the devices sitting on your car area network, and cause you to crash and burn on the highway with no meaningful evidence that anything was amiss.
(RIP Michael Hastings)
Re:This is why my car is airgapped by blackraven14250 · 2013-07-25 08:31 · Score: 2

Are you sure about that? Many head units are hooked into the CAN bus.
Re:This is why my car is airgapped by EvanED · 2013-07-25 08:32 · Score: 2

The worst someone can do wirelessly would be take control of my stereo, which isn't connected to anything else.
So you think. Stock stereo on a recent car? Very possibly untrue.
"We systematically synthesize a set of possible external attack vectors as a function of the attackerâ(TM)s ability to deliver malicious input via particular modalities: indirect physical access, short-range wireless access, and long-range wireless access. .. In each case we find the existence of practically exploitable vulnerabilities that permit arbitrary automotive control without requiring direct physical access." [emphasis in original]
Turns out that car manufactures have been very naughty. And while radios are sort of on a separate bus from actual automotive controls, there are also (compromisable) devices that sit across busses, so there's not a complete air gap.
In that paper, they were able to obtain control over the car's critical automotive systems using techniques ranging from the OBD port (very old news) to CDs with mal-crafted "audio" files put into the stereo to bluetooth connections with the stereo to cellular connections like are used for OnStar.
I don't get it ... by recrudescence · 2013-07-25 08:34 · Score: 3, Funny

... can some one explain it to me with a car analogy?
Re:Rev Up Those Conspiracy Theories - by robot256 · 2013-07-25 08:35 · Score: 2

This is precisely the kind of attack I thought of when they started talking about auto computer security this week. These attack vectors will not be used by hax0rs to make a political statement or spam people's dashboards. They will be used by cartels and spy agencies for targeted assassinations and ransom.
Imagine getting a voice-scrambled message on your phone telling you transfer $50,000 to this account or your wife's car will go out of control on her way home with the kids this evening. Or a prominent diplomat dies in an unexplained crash, triggered by a chip installed months earlier when the car was in for maintenance. It's exactly the kind of thing they would do on the show Burn Notice, for example.
Re:Nothing to see here...move along... by HornWumpus · 2013-07-25 08:41 · Score: 3

Can you imagine where the motherfuckers would have hidden the plug had they not been told more or less where it had to go?

--
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Re:Rev Up Those Conspiracy Theories - by Anonymous Coward · 2013-07-25 08:49 · Score: 5, Insightful

Or a reporter (Michael Hastings) whose award winning work caused Stanley McChrystal's resignation mysteriously dying in a single car accident with a tree; without skid marks and the engine winding up 200 feet away...
Re:And the NTSB wants cars to talk to each other?? by Obfuscant · 2013-07-25 08:56 · Score: 3, Interesting

Or, even worse "OMG! YOU'RE GONNA HIT SOMETHING! EMERGENCY STOP!" to all the cars you pass.
I had something kinda like that 20 years ago. A microwave transmitter from an automatic door opener sensor. $15. A battery. $1. A switch. $1.
Watching the tail lights light up on all the cars that have just zipped past you on the freeway as the radar detectors in those cars start squawking. Priceless. Passing them as they slow to well below the speed limit. Priceless. Watching them zip past again, slam on brakes again, get passed again. Priceless.
Indeed there must be many ehtical companies ... by golodh · 2013-07-25 09:05 · Score: 4, Insightful

apart from the banks, the tobacco industry, the arms industry, big pharma, big oil, marketing firms and so forth.
If only because their helmsmen are required, by law, to maximise shareholder value. Nothing else. In fact: senior management can be sued if they don't set policy to that effect.
The upshot is that no publicly traded company can really afford a moral or ethical compass. What passes for ethics in companies is usually nothing but well-understood self-interest (as in: avoidance of PR damage and a resulting slump in sales through bad publicity).
Whilst I'm against releasing any kind of software vulnerabilities before the responsible parties have had a decent chance to fix it, I'm just as skeptical as most regarding the inclination of e.g. car manufacturers to improve security unless there is a massive PR debacle. For massive PR debacle read: a nasty and widely covered crash involving a photogenic celebrity (ugly celebrities won't cut it) and his/her children, that can be traced unequivocally to the lax security of a car's on-board datacommunication infrastructure.
That's the main thing I can see as getting their attention and lending the issue any kind or urgency. If only because of CYA considerations on part of top management. The only alternative would (in my view) be compulsory network safety standards for cars.
1. Re:Indeed there must be many ehtical companies ... by SleazyRidr · 2013-07-25 09:19 · Score: 3, Interesting
  
  The board of directors do not have a requirement to "maximise shareholder value." Most companies could acheive this by liquidating their assets and investing a another company which is doing better.
  The board of directors do have a requirement to uphold the company charter. Many charters include wording like "maximise shareholder value" but it is also clear that they intend to do this by providing goods and/or services to people, not by kidnapping college students and selling their kidneys.
  
  --
  Is 1563649 a prime number?
2. Re:Indeed there must be many ehtical companies ... by lennier · 2013-07-25 10:55 · Score: 3, Insightful
  
  The board of directors do not have a requirement to "maximise shareholder value." Most companies could acheive this by liquidating their assets and investing a another company which is doing better.
  And isn't that exactly what the tidal wave of mergers, acquisitions and restructurings from the 1980s on have all been about? Buying and selling shells of companies, liquidating their assets, closing the factories, selling the brand to someone else, and then outsourcing the production to China and Mexico while centralising the banking in London, the paperwork in the Cayman Islands and the corporate headquarters in New York.
  Doing this kind of shell game creates a reputation for a CEO as a "miracle worker" and "turnaround artist" and billions of dollars in share value. But if you look behind the scenes you see an increasingly hollow stack of cards that's propped up by debt and gambling rather than production.
  
  --
  You are not a brain: http://books.google.com/books?id=2oV61CeDx-YC
3. Re:Indeed there must be many ehtical companies ... by sjames · 2013-07-25 11:31 · Score: 2
  
  The old shareholder value thing is their favorite excuse, but it's just that. They are in no way required to act in an immoral, unethical, or illegal manner. In theory, their charter can be yanked for any of those since a condition of incorporation is that it be at least marginally in the public interest.
  In fact, they freely choose to act in the manner they do secure in the knowledge that the corporate death penalty practically never happens and personal liability for their acts is nearly as unlikely.
Re:Nothing to see here...move along... by rahvin112 · 2013-07-25 09:27 · Score: 4, Insightful

Yes I can, it would be on the back of the engine and would require a special tool only sold by the dealer to open the door and would likely require the removal of the starter motor and timing belt/chain to access and for bonus points someone like Porsche would require removal of the head gasket to reach the port.
Putting it within 2 feet of the driver was smart, it should have had the additional requirement to be within 6 inches of both the radio and climate controls because if they had everyone would notice some strange object plugged into the port.
This has already been done. (On another(?) car.) by tamyrlin · 2013-07-25 09:44 · Score: 3, Interesting
There is at least one car model where researchers has been able to get access to the CAN bus and do all sorts of shenanigans through the following means:
- * Specially crafted file on a CD inserted into the CD player
- * Exploit weakness in the car bluetooth interface
- * Exploit weakness in built in GSM modem
For the details, see http://www.autosec.org/pubs/cars-usenixsec2011.pdf. (Pretty scary reading. In this case they are also able to disable the brakes and they are also able to engage the brakes on only one of the front wheels for all sorts of "fun"...)
Re:Not News: They put it into brake service mode. by ChumpusRex2003 · 2013-07-25 10:32 · Score: 4, Informative

Correct. On this type of hybrid vehicle, there is a regenerative braking system.
Under normal driving conditions, while the vehicle is in motion, the motor/generator will be used to retard the vehicle. The brake pedal is connected to a electronic pressure sensor, and also mechanically to a hydraulic master cylinder.
Unlike on conventional vehicles, there is no vacuum powered booster, instead the master cylinder hydraulics are used to operate an electro-hydraulic servo, with electronic override. This way, under emergency braking, you get full hydraulic force applied to the wheel cylinders with minimal pedal effort. The electronic hydraulic control will also apply hydraulic pressure when the vehicle is stationary and the brake pedal depressed, and also periodically applies hydraulic pressure when the vehicle is stopped and the transmission in P (for self-test purposes) and when the vehicle is powered on.
The hydraulic servo mechanism can be disabled in order to permit brake maintenance (this releases hydraulic pressure in the booster and prevents automatic application of pressure to the wheel cylinders), permitting access to maintain the friction surfaces. It appears that this hack, merely consisted of transmitting the CAN bus command to put the hydraulic servo system into maintenance mode.
At low speeds, when the electrical regen isn't operative, this will result in the brake pedal travelling further than expected and loss of power assistance. However, with sufficient pedal pressure, it should be possible to slow the car using unboosted pressure.
Re:This Hack by EvanED · 2013-07-25 10:33 · Score: 2

In any sane car design, the brakes are always stronger than the engine.
It's not a matter of being stronger or weaker, it's a matter of the connection. It'd be reasonable to say that in any sane car design there's a physical connection between the brake pedal and the actual wheels -- but this isn't necessarily the case any more. It's still rare according to Wikipedia, but cars are starting to be produced without it and with systems that have computer-controlled brakes instead. Even without a fully brake-by-wire car, the computer still has significant control over the braking system because of anti-lock brakes.
Compromise the brakes so they don't activate in the first place and it doesn't matter how strong they are.
unfathomable by ridgecritter · 2013-07-25 16:09 · Score: 2

I have not read TFA yet, will do so later, so my apology if I'm in error, but....
Why the hell are engineers designing, or being allowed to design, a life-critical system like brakes on a car so that the system lacks a direct, non interruptible physical connection between the driver and the brakes? Any mechanism can fail. Putting electronics between the driver and the brakes increases the number of failure modes as well as the probability of failure. State monitoring, fine. Computed intervention that applies the brakes when the car's AI thinks it's necessary, OK. But selling a car that cannot be stopped when the driver mashes the brake pedal? NFW.
This is simply incompetent engineering. Product liability will attach, as it should.
Meanwhile, I know what to investigate and what not to buy for my next car.
1. Re:unfathomable by Rogue974 · 2013-07-26 01:11 · Score: 2
  
  There is a side you may be missing with instrumentation and controls systems. I don't work on automotive, but I work on industrial controls systems and converting a system from pneumatic (like an old braking system) to electronic (new braking system) in my world dramatically increases equipment reliability. While you do have the extra failure mode of the cars computer, the components of the new system are orders of magnitudes more reliable then the components of the old system. My industrial controls electrical systems mean time between failure when running 24/7/35 is 31+ years. The pneumatic style are maybe 5-10 years mean time between failure. Not sure exactly how this translate to automotive, but in my experience the fly by wire is more reliable. An additional failure mode, but overall more reliable.
  I am not sure if the car manufacturers deal with failure modes that way I do at my plant, things are programmed and designed for fail safe mode. An example would be a stop push button for a piece of equipment. Pushing the button breaks the electrical connection, dropping out the equipment. The button failing, or the wires to the button getting cut, input point on the controls system breaks, etc. takes the exact same action as if you pressed the button. Button no work, equipment no run.
  Planes have been fly by wire for years and were changed due to increased controls systems reliability. Your wrote, "increases the number of failure modes as well as the probability of failure" and while the first half is correct about the increase in failure modes, I highly doubt the increased probability of failure.