Slashdot Mirror


Tesla Model S Has Been Hacked

cartechboy writes: First, it was Chrysler last month with its Uconnect system being hacked while being driven down the road. Now, it's Tesla's turn. That's right, the Silicon Valley automaker's very own Model S electric car has been hacked by two white-hat hackers. The duo were able to manipulate the speedometer, lock and unlock the car, and at speeds of less than 5 mph they were able to make all the electronics go blank and shut down the car while engaging the emergency parking brake dragging the car to a stop. Tesla's already issued a software update that owners can download to path the security flaw. Welcome to the new world where cars can be hacked thanks to all their electronics.

262 comments

  1. FP by Anonymous Coward · · Score: 2, Insightful

    IoT sucks! Welcome to the future.

  2. Sure... by jvaldron6726 · · Score: 5, Insightful

    What the summary fails to omit is that you first need physical access to the car and since they have the ability to do updates over-the-air, they don't need to recall more than a million vehicles to fix the issue.

    1. Re:Sure... by fche · · Score: 1

      "they have the ability to do updates over-the-air"

      That facility better be rock-solid, lest it be another way in. (I doubt it's an open & audited protocol.)

    2. Re: Sure... by Anonymous Coward · · Score: 1, Interesting

      Who else also has the ability to do updates over the air and what sorts of interesting updates can they perform?

    3. Re:Sure... by sxpert · · Score: 5, Interesting

      it's https over openvpn... I'd say it's good enough

    4. Re:Sure... by Anonymous Coward · · Score: 0

      Or I could be a disgruntled employee and decided to fuck with all the customers. There's a reason cars should not have over-the-air software updates.

    5. Re:Sure... by Ol+Olsoc · · Score: 1

      What the summary fails to omit is that you first need physical access to the car and since they have the ability to do updates over-the-air, they don't need to recall more than a million vehicles to fix the issue.

      Oh thank God. I have no idea why everyone doesn't do this wirelessly - cuz on the air updates are perfectly secure.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    6. Re:Sure... by Ol+Olsoc · · Score: 1

      it's https over openvpn... I'd say it's good enough

      I wonder if there's a backdoor so that law enforcement can end a chase or make certain you stop for a roadside inspection or whatever.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    7. Re:Sure... by Anonymous Coward · · Score: 1

      Updates aren't automatically installed. The user is asked if they want to install them. I don't know how much pre-update communication there is (I'd expect at least an email and tweeT), but in your hypothetical bad-update attack, Musk would be tweeting "Holy shit, Bob from Operations is an asshole. Don't update your Model S. More later."

    8. Re:Sure... by masterofthumbs · · Score: 2

      If an update goes out that inadvertently breaks every Tesla, a patch can be quickly distributed without having to wait. Assume they don't have OTA update capabilities. How does a user get a new update? If they have to go to the dealership, this can be difficult as states do not allow for Tesla dealerships to exist so you would have to drive a long distance just for software update. Any bugs in the latest update will now require you to go back to get version X.X.1 for that simple patch. Instead, lets let the customers do the update themselves. How do you install the update? Using a USB flashdrive would be ideal, plug it in with the *proper filesystem* (NTFS? Can't use OSX. FAT16/32? Outdated. ExFAT? Pay up to Microsoft.) and make sure the update is placed in the correct spot in the drive (probably the root). All of these are probably easy for slashdot users but not every Tesla owner is as tech savvy. The update process is even more important, removing the drive during the update could screw everything up, causing warranty issues (pay out of pocket because *you* screwed up).

      For the ease of install, an OTA is the easiest solution. A broken car can still update as long as it can get a signal, the dumbest users have to do nothing, and you don't require your users to have to swing by the dealership that may be in the next state. The system also facilitates getting use metric data from the cars, something that can be incredibly helpful when looking at ways to increase the efficiency of the motors/batteries.

    9. Re: Sure... by avgjoe62 · · Score: 1

      I have no idea why this was modded down. It is a very valid question.

      Why are drive train components accessible on any car over-the-air? I understand the need for a GPS or entertainment system to access the outside world, but why do the components of the power train or braking systems need to be accessible? Physical separation can't be all that hard and would be so much safer.

      --

      How come Slashdot never gets Slashdotted?

    10. Re:Sure... by bobbied · · Score: 1

      Jeepers man, You've reinvented LO-Jack...

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    11. Re: Sure... by Iniamyen · · Score: 1

      It has to do with the standards laid out for interoperability (I don't know if it's the OBD standard but it's something agreed upon by the players in the industry.) Basically in order to make everything as plug and play as possible it all has to be able to talk to each other, which by definition makes it less secure. There's no such standard/requirement in, say, avionics, which is why you have physically separate networks for the different systems on an airplane.

    12. Re:Sure... by VAXcat · · Score: 1

      Back when cars only had a single hydraulic circuit to run the front and read brakes, the handbrake WAS an emergency brake (although back then it was also usually activated by a pedal). Now that modern cars (since around 1964 or so) have dual circuit hydraulics, a single leak or hose failure is no longer an emergency, and the handbrake is no longer relaly an emergency use item.

      --
      There is no God, and Dirac is his prophet.
    13. Re:Sure... by Khyber · · Score: 1

      "If an update goes out that inadvertently breaks every Tesla, a patch can be quickly distributed without having to wait."

      And when that patch fucks the communications system and makes it impossible to do OTA updates???

      That's what I thought.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    14. Re:Sure... by Khyber · · Score: 1

      "I wonder if there's a backdoor so that law enforcement can end a chase or make certain you stop for a roadside inspection or whatever."

      Microwave burst jamming of electronics works pretty well. The Tesla, for all its advances in construction, is still not close to being a faraday cage like vehicles from the 70s and 80s. Since it's meant to receive microwave transmissions for data uplink, you've got an instant avenue of attack.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    15. Re:Sure... by Anonymous Coward · · Score: 0

      Dammit Bob!

    16. Re:Sure... by Anonymous Coward · · Score: 0

      There's actually no much communication as to what the update patches, (ie. no change log or e-mail). If you're luckly, you can dig through the forums to see if anyone knows what the change does. You just get a notification on your Model-S's screen that there is a new update and when do you want to install it.

    17. Re:Sure... by Anonymous Coward · · Score: 0

      From what I have found out, there is firmware on the car that only the Tesla service center can update, and you need physical access to the car to update this. I would guess that the communication drivers and other lower level control software is in there.

      I don't recall any OTA updates addressing low level issues.

    18. Re: Sure... by Anonymous Coward · · Score: 0

      I don't think they were directly accessible, I think the white-hats found a way to flag an critical error, and this caused the car to so into a safety mode.

    19. Re:Sure... by Ol+Olsoc · · Score: 1

      "I wonder if there's a backdoor so that law enforcement can end a chase or make certain you stop for a roadside inspection or whatever."

      Microwave burst jamming of electronics works pretty well. The Tesla, for all its advances in construction, is still not close to being a faraday cage like vehicles from the 70s and 80s. Since it's meant to receive microwave transmissions for data uplink, you've got an instant avenue of attack.

      Imagine once we get self driving cars. Late on your child support payments? You hop in the car, your smartphone says you are there, and it drives you right to family court - after locking you in of course. Missed a car payment? You wake up in the morning to find your car isn't there - It drove itself back to the dealership. And an awesome way to destroy the competition. I can see teams of hackers at say, Toyota, working their way into creating a bogus Ford update to create a crashocalypse to discredit them.

      All this is kinda tongue in cheek, but I wouldn't be too surprised......

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    20. Re:Sure... by Anonymous Coward · · Score: 0

      What the summary fails to omit is that you first need physical access to the car and since they have the ability to do updates over-the-air, they don't need to recall more than a million vehicles to fix the issue.

      The original Chrysler hack also required physical access. The 2nd hack was done remotely. This is just the beginning.

    21. Re:Sure... by dryeo · · Score: 1

      I thought a Faraday cage has to be grounded to actually work. I know that at home, about the only place I sometimes get cell reception is when my phone is in a little cubbyhole under the dash, surrounded my metal. Pull the phone out and watch it lose the signal.

      --
      https://en.wikipedia.org/wiki/Inverted_totalitarianism
    22. Re:Sure... by ZeroPly · · Score: 1

      No. It's certainly not "good enough". That's laughably optimistic - the Heartbleed bug is still fresh in our memory, and SSL is one of the most used libraries in the world.

      The only that that's good enough is a mechanical switch that disables all changes to the firmware and operating software. If you want to get updates, you go to the car, flip the toggle switch by the ODBC port, and run the updates. As soon as you're done, you flip the switch off. With that switch in the off position, the car is capable of receiving GPS, and sending telemetry, but that's it.

      I've been in IT for about 30 years now, and I drive a car that doesn't even have power windows or power locks. That's exactly how much I trust software engineers.

      --
      Support microSD: in a post 9/11 world, it is unwise to carry your data on media that you cannot comfortably swallow.
    23. Re:Sure... by adolf · · Score: 1

      No. A Faraday cage need only be continuous, conductive, and with any holes that might exist being smaller than some known (if I could be bothered to look it up) fraction of a wavelength of the signal to be blocked.

      Its primary function is to function as a short-circuit to RF fields, not a sink to ground (although grounding it certainly doesn't hurt).

      Anecdotes from the real world: I used to have a Faraday bag for my work-provided GPS-tracking cell phone, and it worked fine. Modern wallets are sometimes function as Faraday shields, to prevent RF attacks on passports, NFC credit cards, and various other RFID wizardry that we sometimes carry on our person.

    24. Re:Sure... by sjames · · Score: 1

      That is not actually true. People do still sometimes experience sudden and total brake failure.

    25. Re:Sure... by kheldan · · Score: 1

      WIth regards to 'the ability to do updates OTA':
      I've said it before, and I'll say it again: If there is any sort of wireless access to the vehicles' systems, there needs to be a hardwired, unimpeachable switch available to the operator of the vehicle, that turns off that transceiver, preventing it from operating. When a vehicle leaves the factory, ostensibly it's doing so in a 100% operable, fully tested state. If there are updates to the firmware or software after that, the manufacturer should inform the owners of it, and allow them to decide whether or not they wish to allow it. Now, some of you are going to object, but hear me out: We've all been using computers for years and years (or decades and decades, as the case may be for some of us) and we know damned well that zero-day exploits have been, currently are, and always will be a fact of life. We're well past the point where it's just an ECS module running entirely off firmware in EPROMs. All it takes is one flaw in the code that allows an attacker to wirelessly upload new code to the vehicle, and we've got a situation where someone's car turns into a weapon under someone else's control. Physically preventing an attack vector from existing is the best, safest solution to the problem. Of course if someone gains physical access to the vehicle then all bets are off, but that's no different than it's ever been if an attacker gains physical access to any computer system, but closing the 'wireless hole' is only logical. Furthermore if people insist they want wireless internet access in their vehicles, that should be an entirely separate transceiver on a physically separate network, unassociated with vehicle control systems. If I was designing vehicles in this day and age, that's how I'd do it: critical systems on one bus, non-essential systems on a completely separate one. It's a matter of safety for the driver, passengers, and anyone else in the vicinity of the vehicle.

      On a different subject: Someone above was talking about the uselessness of the emergency brake; I'd like to point out that that it's called the 'emergency' brake for a reason: It's not supposed to be an equivalent or replacement for the normal braking system in a vehicle, it's supposed to be the last-ditch backup to try to stop the vehicle in an emergency. It's not like you can open the door and drag your feet to bring it to a stop like it's a bicycle or something, damnit. If you've actually got to use the emergency brake as an emergency brake, then things have really, really gone wrong on you, but it's still better than having nothing at all; you've got a better chance of surviving a crash at 40mph than you do at 80mph (however small) for various values of the word 'survival'.

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    26. Re:Sure... by Anonymous Coward · · Score: 0

      I doubt they've sold anywhere close to a million vehicles so the million-vehicle recall is not an issue in any case.

      Ford does OTA updates too, by the way.

    27. Re:Sure... by nofx911 · · Score: 1

      One would hope that before you purchase a Tesla car you would be okay with your distance to the nearest service center:
      http://www.teslamotors.com/fin...

    28. Re:Sure... by vux984 · · Score: 1

      and since they have the ability to do updates over-the-air

      Then so can the hacker, if not today, then one day?

      they don't need to recall more than a million vehicles to fix the issue.

      Because there aren't that many. Have they even made 100,000 of them yet?

    29. Re:Sure... by internerdj · · Score: 1

      So, if it gets a repossession packet, who is liable for damages if the vehicle drives itself back to the dealership and has an accident between the owner's home and the dealership?

    30. Re:Sure... by Anonymous Coward · · Score: 0

      Easily fixed, simply DESTROY any onboard communications systems in any car you purchase unless you are sure that there is no connection between those systems and the cars drive systems. I imagine as times goes on they'll try to make it evermore difficult but there will likely always be an antenna cable that can be clipped to at least limit the vulnerability.

    31. Re:Sure... by Ol+Olsoc · · Score: 1

      Easily fixed, simply DESTROY any onboard communications systems in any car you purchase unless you are sure that there is no connection between those systems and the cars drive systems.

      There are web pages devoted to silencing ONSTAR on GM vehicles. ONSTAR is the closest thing to the internet connected car of the future.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    32. Re:Sure... by Anonymous Coward · · Score: 1

      I've been in IT for about 30 years now, and I drive a car that doesn't even have power windows or power locks. That's exactly how much I trust software engineers.

      Is your last name Odama?

    33. Re:Sure... by kenai_alpenglow · · Score: 1

      'fraid not. Salt ate through a breakline (thank you, ohio). Push the pedal, all it did was push brake fluid out the line. Thankfully there was the emergency brake (and a manual transmission).

    34. Re:Sure... by Jeremi · · Score: 1

      And when that patch fucks the communications system and makes it impossible to do OTA updates???

      I have no idea if Tesla implements this (although I'd imagine they do), but most systems have a way to boot into "Safe Mode" in order to resolve this chicken-and-egg issue.

      The "Safe Mode" firmware is read-only and never modified by an OTA update, and it only has to be smart enough to download a (hopefully working) OTA update, install it on to the normal/non-safe partition, and then reboot itself.

      --


      I don't care if it's 90,000 hectares. That lake was not my doing.
    35. Re:Sure... by AaronW · · Score: 1

      Actually OTA updates do affect low-level issues. I have had updates that affect things like windshield wiper operation, acceleration, the door handles and more. It's interesting when the car is installing an update. You hear all sorts of clicks and noises as various subsystems are updated and reset. I don't know if they can update the cellular modem or not, but I would not be surprised if they could.

      If worse comes to worse they can always send a technician (called rangers by Tesla) to your location and do a manual update.

      --
      This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
    36. Re:Sure... by AaronW · · Score: 1

      It doesn't really matter. For an extra $100 they will come to you, unless it's a warranty issue in which they wave the charge and send a tech to your location.

      --
      This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
    37. Re:Sure... by AaronW · · Score: 1

      When I worked at Atheros we used Faraday cages to house the wifi cards and used direct coax hookups. Even with that I could still pick up a dozen or so weak wifi access points. The Faraday cages were quite nice, 1/4" polished stainless steel.

      --
      This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
    38. Re:Sure... by jonwil · · Score: 1

      If Tesla are smart, they will have digitally signed all their updates with strong cryptography (2048 bit RSA or similar) such that the private key is stored on a secure box with limited access.

      Hackers would need to obtain that private key before the car would pass their bogus firmware update as valid and install it.

    39. Re:Sure... by vux984 · · Score: 1

      Lots of systems exist that only run signed code. Most of them have fallen to exploits. The problem is rarely that hackers have gotten the private keys... its that they've found a way of getting the system to run unsigned code.

    40. Re:Sure... by dryeo · · Score: 1

      No. A Faraday cage need only be continuous, conductive, and with any holes that might exist being smaller than some known (if I could be bothered to look it up) fraction of a wavelength of the signal to be blocked.

      You are right, with the key being continuous, which an automobile body is not.

      Its primary function is to function as a short-circuit to RF fields, not a sink to ground (although grounding it certainly doesn't hurt)

      Wiki and other sources claim its primary function is to block static and non-static electric fields by channeling the electric field around and canceling the interior of the cage. I think we're just more familiar with the RF part due to the tin foil hats that we all wear while they are used as much for large voltages such as lightening. I note that linesmen sometimes wear full tin suits for protection when working around very high voltages.
      As I stated above, my antecedent evidence is getting the best cell reception buried in my vehicle metal shell, which does have large glass sections.

      --
      https://en.wikipedia.org/wiki/Inverted_totalitarianism
    41. Re:Sure... by KGIII · · Score: 1

      In a court of law? Probably the owner if the repossession was lawful. If they were unlawfully seizing the car then they would be accountable but the owner who missed the payment would be accountable as they would be the one who made the car need to be returned due to non-payment. If your vehicle is harmed during repossession currently you are accountable for it. The premise is that you made the repossession a necessity.

      --
      "So long and thanks for all the fish."
    42. Re:Sure... by Khyber · · Score: 1

      Nope.

      If the vehicle is legally repossessed, then the possession of the car defaults to the company taking the vehicle back, as the 'owner' no longer has a legal right to it.

      Possession is 9/10 of the law.

      Thus the company taking the vehicle back would be at fault and liable.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    43. Re:Sure... by KGIII · · Score: 1

      The reason I mentioned the repossession of a regular car is I have seen how that worked out. An in-law, this was a while ago, had his car taken and the towing company yanked it while it was in gear and damaged it. He paid the required payments and got it back. He then sued for damages. The judge pretty much giggled at him but allowed him to sue. It did not go well.

      --
      "So long and thanks for all the fish."
    44. Re:Sure... by Khyber · · Score: 1

      That judge was an idiot. Same thing happened to my fiance's car here in CA. They damaged it while towing it away. He paid to get it back, and turned around sued for the damages done to the car, and won. The judge found the tow company negligent in reclaiming the vehicle intact. Even Ford stepped up on our side.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    45. Re:Sure... by rpstrong · · Score: 1

      What the summary fails to omit is that you first need physical access to the car [...]

      No, the summary didn't say a single thing about having physical access to the car. A failure to mention is not a failure to omit.

  3. Awesome. by Anonymous Coward · · Score: 0

    All we need now is thermoptic camo, think tanks, and oculus to not suck, and we can live in a Ghost in the Shell future.

  4. Proof reading? by Anonymous Coward · · Score: 1, Informative

    ners can download to path the security flaw.

    1. Re:Proof reading? by Anonymous Coward · · Score: 0, Informative

      That and Tesla's already issues a software update. Proofread much, /. ?

    2. Re:Proof reading? by Translation+Error · · Score: 1

      I'm sure they'll release a patch for the article soon.

      --
      When someone says, "Any fool can see ..." they're usually exactly right.
    3. Re:Proof reading? by Iniamyen · · Score: 1

      "Path" and "issues" are words - spellchecker checks out. Asking someone to proofread is like asking them to test/verify their software before releasing it. Completely ridiculous!

    4. Re:Proof reading? by Anonymous Coward · · Score: 0

      This isn't a 300 page book, it's a tiny paragraph.

      That's like releasing software that doesn't compile.

      Completely ridiculous!

  5. Future market by puddingebola · · Score: 1

    Some day there will be a market for a car with no on board computer or electronics. The intro to the first Fallout game features a television commercial for a car called the Corvega, with no electronics and no computer for only $199,999.99. In a world on the verge of nuclear war, or one on the verge of computer security catastrophe, sounds like a steal.

    1. Re:Future market by Higaran · · Score: 1

      I can buy almost any car from the 70's or 80's that's in half way descent condition for less that $10k and it would qualify.

    2. Re:Future market by bws111 · · Score: 1

      If you're going for that level of paranoid, don't forget the bulletproof glass, armor plating, etc.

    3. Re:Future market by Anonymous Coward · · Score: 0

      Some day there will be a market for a car with no on board computer or electronics.

      There is already, why do you think Harry Dresden drives a VW Bug? Or in the TV version, a Korean-era Jeep?

      Wizards know what's up.

    4. Re:Future market by sinij · · Score: 4, Informative

      To protect against cyber threats that would work. To protect against nuclear EMP (since we were talking Fallout)? Not so much. Even 70s and 80s cars use coils and ECUs, and that would get fried. What you need is mechanically injected car with non-electronic control. Some of the early 70s Mercedes would almost work, since they used vacuum to control everything.

    5. Re:Future market by Anonymous Coward · · Score: 0

      There's probably a market for such cars now, it's just that nobody with the enormous amount of capital required to start a car manufacturing business has jumped on the opportunity.

    6. Re:Future market by Anonymous Coward · · Score: 0

      IoT is like a car without seatbelts, airbags or crumple zones.

    7. Re: Future market by Anonymous Coward · · Score: 0

      Not al 70 where ecu still mostly points.
      Coils an magnitos since car 1.

    8. Re:Future market by Bob+the+Super+Hamste · · Score: 1

      So your saying that my '68 midget will be worth a fortune then, or it will be once I replace the Lucas parts.

      --
      Time to offend someone
    9. Re: Future market by Anonymous Coward · · Score: 0

      The computers an electronics systems are not the issue. It is the not separating the the critical systems from the other BS that is commented to a network.

    10. Re:Future market by Higaran · · Score: 1

      There are too many environmental protection laws now, with out sensors and other various electronics there would be no way to get those type of cars qualified under the various exhaust rules. I'm not sure you could even get such a vehicle qualified under an off road only provision either, because I know that lawn mowers, atv's and the such also have some kind of rules as to how much they pollute.

    11. Re:Future market by CrimsonAvenger · · Score: 1

      To protect against nuclear EMP (since we were talking Fallout)

      EMP and fallout are completely unrelated. Presence of fallout doesn't have any impact on EMP effects, and vice versa.

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    12. Re:Future market by Higaran · · Score: 1

      He was talking fallout the game series, not fallout as in nuclear.

    13. Re:Future market by Anonymous Coward · · Score: 0

      Dude... He meant Fallout as in the series of games, not fallout as in the byproduct of nuclear detonation.

    14. Re:Future market by Bob+the+Super+Hamste · · Score: 1

      There is a market and it is pretty much saturated with about 80 years worth of vehicles. Depending on what you like really nice once can be had for less than $10,000 and it goes up from there. I have a car that if it were restored to be a concourse car it might fetch $12,000 but that would require sinking in many times that amount into it.

      --
      Time to offend someone
    15. Re:Future market by laurencetux · · Score: 1

      Missed an Update?

      the Beetle got squished by The Ick (like 3 books back in fact). He drives a Company Car Now

    16. Re:Future market by bws111 · · Score: 1

      Nope. Those things protect you from accidents. Causing an accident or otherwise messing with the car by hacking is not an accident, it is a criminal act

    17. Re:Future market by puddingebola · · Score: 1

      Correct, this is what I am saying.

    18. Re:Future market by james_shoemaker · · Score: 1

      from the 80's it would likely have electronic ignition, but from the early 70's you might be able to experience the joy of tuning breaker point ignition.

    19. Re:Future market by Anonymous Coward · · Score: 0

      Let me start out by saying that I haven't put nearly the amount of research or thought into this before making this comment, so take it at face value.

      That said, a diesel engine could fit the bill, here. They do not have to deal with most of the electronics seeing as they don't need all the engine management that gasoline vehicles require. Back in the 90s, my dad bought a Toyota Land Cruiser with a 2.8L Mercedes-Benz diesel (it was in Brazil)... The thing need absolutely no electronics to run. As a matter of fact, you could actually turn the ignition key off, turning off all electrical components of the car (lights, radio, etc) and the engine would not halt. The only way to truly turn the engine off was by choking, and the vehicle had manual choker in the cabin that needed to be pushed to accomplish that.

      The problem with vehicles today isn't so much that they require all these gadgets, its mostly that the market demands them. People don't even know what drive-by-wire means, but they want it! Most find the paddle shifters really fun to play with. Few want to check the air on their tires once a month, a light on the dashboard is more desirable for these people. Heck, people have gotten so lazy that they don't even want to actually put the key into the ignition and turn, they want push start!

    20. Re:Future market by bobbied · · Score: 1

      Some day there will be a market for a car with no on board computer or electronics.

      Not going to happen, both the EPA and the CAFE standards have seen to that. There is ZERO chance you can meet the emission and mileage standards for any vehicle which doesn't include some kind of engine and drive train control electronics.

      Unless, of course, you are talking about a future time w/o the Federal Government being around... In which case, buying cars will be the least of your worries...

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    21. Re:Future market by drinkypoo · · Score: 1

      Some day there will be a market for a car with no on board computer or electronics.

      You could definitely do it with relatively little modification to an elderly diesel UNIMOG (or similar) with a hydraulic system, replacing the battery with an accumulator and the starter motor with a hydraulic one. A low-pressure branch of the hydraulic system could operate your "accessories", by which I mean blower fan and windshield wipers. Probably though you would be better off using a 94-98 Cummins motor from a Dodge pickup than the original OM-whatever, or even an OM617 swap. This is because they normally work with a heater grid instead of glow plugs, yet they have about the same sort of sweet-ass injection pump as on the OMs. You could reasonably come up with a diesel-fired intake heater to replace the grids.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    22. Re:Future market by Khyber · · Score: 1

      " To protect against nuclear EMP (since we were talking Fallout)? Not so much. Even 70s and 80s cars use coils and ECUs"

      No. Heavy use of electronics in critical car control systems didn't happen until about 1987.

      Most anything before that is perfectly fine if it's not in possession of an electronic-controlled fuel injection system or transmission.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    23. Re:Future market by Anonymous Coward · · Score: 0

      Because of the Draconian regulations the EPA has put out on diesels, which pretty much forces the use of a computer on newer vehicles, what people are doing is finding a dead tractor with just the VIN, and "restoring" it (building from scratch, adding the part with the number) to have a functioning/legal tractor or other farm vehicle.

      With car makers starting to license (not sell) the software on the engine (forcing a used car buyer to spend hundreds for a code to enable the vehicle to start and move), as well as other DRM based shanangians, it wouldn't be surprising for people to pry the VIN off a car that was crushed at a junkyard just to be able to reuse it and build something similar to that make and model, except computer free. Yes, points and carbs suck, but they will continue working, EMP blast or not.

    24. Re:Future market by puddingebola · · Score: 1

      Excellent idea.

    25. Re:Future market by Khyber · · Score: 1

      " Heck, people have gotten so lazy that they don't even want to actually put the key into the ignition and turn, they want push start!"

      In a zombie apocalypse, every second counts. If I don't have to fuck about with putting a key in my escape vehicle so I can get away safely, I'll fucking take it!

      I don't think zombies know how to use or trigger EMPs.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    26. Re:Future market by Khyber · · Score: 1

      "Depending on what you like really nice once can be had for less than $10,000"

      Dude, go pick up an Auto-Trader magazine (if they're even still in print, you can usually find them on the periodicals rack in 7-11 stores.)

      Then drop your price in half, or more. /looking at a nice 1978 LTD land sled, pristine, $3,000. Sure gas mileage sucks, but it's a fucking TANK in construction and will eat up most any other modern vehicle that decides to get in a collision with it.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    27. Re:Future market by bobbied · · Score: 2

      To protect against nuclear EMP (since we were talking Fallout)? Not so much.

      Trust me on this... EMP is NOT an issue for your automobile... They tested this with a number of vehicles years ago and found that EMP was not a major issue for the electronics in cars.

      EMP affects electronics to varying degrees. I break it down into three groups. First there is the "no noticeable" affect group. This is where an EMP has no noticeable affect on the equipment's operation, for a car this means it keeps running. Second there is the "upset" where the EMP causes the equipment to malfunction temporally. Then there is the "Requires repair" category where the EMP breaks something so the system doesn't operate.

      As I recall, they tested a dozen vehicles, ranging from small cars to large trucks and they applied pulses at the strength one expects to see just outside the blast radius of your standard nuclear device where one would expect that people could drive. ALL of the vehicles fell in the first two categories, with most falling in the first. It was like 2 out of 12 vehicles that where upset enough to stop running, and both of these where "repaired" by turning off the key and restarting them.

      I conclude from this that EMP isn't a problem for the vast majority of vehicles on the road today. If you think about this, it makes perfect sense. Electronics in cars are basically inside of a metal box, which is itself inside of metal boxes. They are self contained electrical systems in a faraday cage, especially the parts that "make it run" down the road.

      So don't worry your self over your modern car not running in the event of an EMP.... There will be MUCH bigger fish to fry if that happens. You are going to need water, food and protection first, not transportation.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    28. Re:Future market by bobbied · · Score: 1

      You don't get out of jail free by using diesel. Modern diesel engines on the road today are cuck full of electronic controls used to meet the EPA's standards.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    29. Re:Future market by McGruber · · Score: 1

      Some day there will be a market for a car with no on board computer or electronics.

      Here you go: Hemmings: Ford Model T for Sale

    30. Re:Future market by Viol8 · · Score: 1

      "ure gas mileage sucks, but it's a fucking TANK in construction and will eat up most any other modern vehicle that decides to get in a collision with it."

      Keep believing that myth if you like. Lots of people think it because the bodywork of older cars was stronger than today, however the core structure (usually a chassis but applies to monocoques) was a damn site weaker. And thats before we get onto lack of collapsable steering column, intrustion of engine block, no airbag etc.

      So in a low speed bump with a new car you'll come off better, but in a high speed head to head that guy in his new 5 series you hit will be walking wounded. You however will be a corpse.

    31. Re:Future market by Admiral_Grinder · · Score: 1

      My parents had one of those, and they saved a done of money on gas.....because it was so unreliable that they didn't go anywhere that they didn't want to get stuck at. And dad was a mechanic at the time. They told me that trading it in for a new Toyota was the best decision they ever made.

    32. Re:Future market by slinches · · Score: 1

      I'd say there's some risk for electric cars. How would you charge them when the grid is fried?

      --
      Knowledge Brings Fear
    33. Re:Future market by Anonymous Coward · · Score: 0

      You are going to need water, food and protection first, not transportation.

      And you live in some residential area of some city, so how the hell are you going to get to the water, food and guns without transportation? Walk it?

    34. Re:Future market by bobbied · · Score: 1

      That's true... But it's not the car being broke, but your ability to refuel it being broke.

      Gasoline cars will suffer from the same "how can I refuel it" problem. Without power, the local gas station won't be working for you either... I suppose you could manually pump gasoline out of the ground, or have fuel in storage, but if you are a real preper type, you've thought of all that..

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    35. Re:Future market by savuporo · · Score: 1

      That would be glow plug engine then ?

      --
      http://validator.w3.org/check?uri=http%3A%2F%2Fwww.slashdot.org Errors found while checking this document as HTML5!
    36. Re:Future market by puddingebola · · Score: 2

      Do these come in turquoise?

    37. Re:Future market by Anonymous Coward · · Score: 0

      Maybe in large production runs by major manufacturers, but in most countries there are tones of kit cars, small production runs and other types of dual use vehicles (off road with turn signals/brake lights slapped on) which don't have to follow the encyclopedia of regulations that larger commercial productions are required to follow.

    38. Re:Future market by Anonymous Coward · · Score: 0

      >So in a low speed bump with a new car you'll come off better, but in a high speed head to head that guy in his new 5 series you hit will be walking wounded. You however will be a corpse.

      But ~~christine~~ your car won't require much repair, and will look great for the next ~~victim~~ driver!

    39. Re:Future market by drinkypoo · · Score: 1

      I conclude from this that EMP isn't a problem for the vast majority of vehicles on the road today. If you think about this, it makes perfect sense. Electronics in cars are basically inside of a metal box, which is itself inside of metal boxes. They are self contained electrical systems in a faraday cage,

      Well, no. There's holes in the cage, and wires come out of the boxes, so they don't actually get to act like faraday cages. The car does a moderately good job of it, though.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    40. Re:Future market by Pubstar · · Score: 1

      My 81 280ZX had two ECUs in it with a coil pack for ignition with fuel injection. So yeah, even back then cars started packing in the electronics.

    41. Re:Future market by Pubstar · · Score: 1

      I was watching some prepper show where they had some dude that built a small, portable pump to drain out the local fuel stations into the back of his trucks fuel container. Pretty interesting idea. Of course, the best option in this situation would be bio diesel.

      Note: Not a prepper, but the ideas that some of these guys have and oddball solutions are quite interesting.

    42. Re:Future market by Pubstar · · Score: 1

      Go back to reddit.

    43. Re:Future market by Khyber · · Score: 1

      "And thats before we get onto lack of collapsable steering column"

      Most steering columns to day don't collapse. Because of the airbag itself. Older cars, the steering wheel would unlock and shift upwards in an accident. Intrusion of engine block? Yea, good luck getting through that centimeter-thick steel firewall from any collision with anything short of a semi tractor.

      Airbags cause:

              Abrasion to the face, chest or upper extremities
              Contusion of the face, chest, upper extremities, knees or internal organs
              Strain, fracture or blunt trauma to the cervical spine
              Burns on the chest, upper extremities or hands
              Fracture or break in the face, upper extremities or wrists
              Fracture in the skull or rib cage
              Loss of consciousness or concussion injuries
              Bruising or swelling of the brain
              Laceration to the veins, arteries, heart, lungs or brain stem
              Laceration to the liver or spleen
              Compression of the brain or traumatic brain injury (TBI)
              Rupture inside the heart muscle
              Eye injury such as rupture to the globe, retinal tear, corneal abrasion or conjunctivitis
              Hearing loss or ear trauma
              Trauma to the fetus of a pregnant women or puncture in the placenta
              Internal bleeding
              Wrist trauma and sprained fingers
              Irritation in the throat, asthma attack or coughing
              Irritation of the skin, also called airbag dermatitis

      Safe, my ass.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    44. Re:Future market by Viol8 · · Score: 1

      "Most steering columns to day don't collapse"

      Not the part in the cabin no. The rest - yes.

      "Yea, good luck getting through that centimeter-thick steel firewall from any collision with anything short of a semi tractor."

      Centimeter thick? A few mm if you're lucky. And if you want to see the sort of damage that 2 cars colliding at 70mph can do there are plenty of videos on youtube.

      "Airbags cause:"

      Yeah, airbags can do all that. But generally they'll save your life.

      Hey, its your life pal. You want to believe your antiquated POS is built like a tank, you go right on ahead. I just hope you never find out the hard way that it isn't.

    45. Re:Future market by Khyber · · Score: 1

      "You want to believe your antiquated POS is built like a tank, you go right on ahead. I just hope you never find out the hard way that it isn't."

      It's survived several accidents at highway speeds, along with me in it. Most vehicles that ever hit it got totaled, the exception being a lifted truck which managed to perfectly align its tires with mine and crawl up on my trunk from behind. That truck had no damage and I only had to replace a dropped fender.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    46. Re:Future market by Viol8 · · Score: 1

      "It's survived several accidents at highway speeds, along with me in it."

      Riiight. Course it has.

      On the small chance you're not full of shit that means you're an utterly crap driver. Hand in your license please.

    47. Re:Future market by Khyber · · Score: 1

      My driving record is 100% no-fault flawless. My monthly insurance rates are lower than your IQ.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
  6. But.... BUT!!! by jmd_akbar · · Score: 5, Insightful

    Didn't they have to physically "break" the car before they got access into it? Your post is clearly a scare tactic.

    --
    Nothing here... So... SHOOO!!!
  7. Patched by Anonymous Coward · · Score: 1

    My Tesla was patched last night. No such luck for my Dodge.

    1. Re:Patched by sinij · · Score: 1

      The last time my 80s era roadster was patched was when it rolled off the production line. 30+ years on the long-term stable release! Beat that with your Tesla.

      Why do we need to connect cars to the internet again?

    2. Re:Patched by Bob+the+Super+Hamste · · Score: 1

      The simple solution to that is this.

      --
      Time to offend someone
    3. Re:Patched by Anonymous Coward · · Score: 0

      My Tesla was patched last night. No such luck for my Dodge.

      you can download the update for you Dodge to a USB drive and do it yourself

    4. Re:Patched by bobbied · · Score: 1

      My Tesla was patched last night. No such luck for my Dodge.

      There is always bond-o and fiberglass for that Dodge..

      Not that kind of patch eh?

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    5. Re:Patched by Sorny · · Score: 1

      "My Tesla was patched last night. No such luck for my Dodge."

      Don't have a 1GB USB stick and a web browser to update it yourself?
      Take it to the dealer, takes about 20 minutes.
      Wait until your USB stick shows up in the mail and do it yourself.

      --
      OSX pwns.
  8. Atleast no recall by Anonymous Coward · · Score: 0

    Probably auto-updated overnight.

  9. No worries! Elon Musk will fix it! by NotDrWho · · Score: 0

    "He can do ANTYHING!" said Slashdot

    --
    SJW's don't eliminate discrimination. They just expropriate it for themselves.
    1. Re:No worries! Elon Musk will fix it! by bobbied · · Score: 1

      It's not like it's rocket science.....

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    2. Re:No worries! Elon Musk will fix it! by Admiral_Grinder · · Score: 1

      It is his side job as well though if that helps.

    3. Re:No worries! Elon Musk will fix it! by Pubstar · · Score: 1

      Thatsthejoke.jpg

  10. I want my Cat connected to the IoT by sinij · · Score: 1

    I want my Cat connected to the IoT. Somebody please hack it so it stops leaving hairballs everywhere.

  11. Re: Vimax Asli Canada by Anonymous Coward · · Score: 0

    Why is everyone saying electronics.
    Cars have had hack proof electronics for decades.
    It's the lets connect those electronics to the open net. Is tne problem.

  12. EMP and Faraday Cages [Re:Future market] by Geoffrey.landis · · Score: 1

    ...To protect against nuclear EMP (since we were talking Fallout)? Not so much. Even 70s and 80s cars use coils and ECUs, and that would get fried...

    Maybe... and maybe not. Old cars had thick metal hoods. Modern cars often use plastic for parts that don't need to be mechanically strong, but the old ones put the engines inside a pretty good Faraday cage.

    --
    http://www.geoffreylandis.com
    1. Re:EMP and Faraday Cages [Re:Future market] by Higaran · · Score: 1

      The question I have is, if the car is not running, or even if the key is out of the ignition would the car get fried? How much voltage would the EMP generate on the cars electrical systems, vs how much does it actually take to fry a car? I'm sure that would vary depending on the distance the car is from the explosion.

    2. Re:EMP and Faraday Cages [Re:Future market] by Khyber · · Score: 1

      Batteries and wiring harnesses would be the most vulnerable in older cars. EMPs have a field day with energy storage and transmission.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    3. Re:EMP and Faraday Cages [Re:Future market] by drinkypoo · · Score: 1

      Maybe... and maybe not. Old cars had thick metal hoods.

      Does the thickness really matter? As far as I understand, what's most important is whether there's gaps in the structure. There are cars both old and new which have functional holes in the hood, but virtually all of them (except a few notables, like the Corvette — and of course, more expensive and exotic vehicles) are made with metal bodies.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    4. Re:EMP and Faraday Cages [Re:Future market] by U2xhc2hkb3QgU3Vja3M · · Score: 1

      Does the thickness really matter?

      Well, I have a friend who's pretty thick and pretty much nothing can affect him.

    5. Re:EMP and Faraday Cages [Re:Future market] by Anonymous Coward · · Score: 0

      The device doesn't have to be on to get affected by an EMP, any wires will act as antennas. This includes bonding wires in chips, and traces on the PCB that may get an induced electrical charge from an EMP, possibly damaging the circuits.

  13. Still not up to Lucas level of electronic security by Bob+the+Super+Hamste · · Score: 4, Funny

    Tesla's efforts still won't provide the level of electronic security from remote hacks that old Lucas equipment did.

    --
    Time to offend someone
  14. easier patch for younger drivers by nimbius · · Score: 5, Funny

    as a college grad with more debt than a south american country, I can tell you I was worried about this bug. I came up with a handy countermeasure to avoid nefarious car hackers:

    I work two jobs and drive a 2001 Ford crown victoria i bought for six hundred bucks at a police auction. It burns oil, and smells like parking citations and regret. On a hot day it stinks like hamburgers; I do not know why. The jiggle required to get the spare key to engage the ignition is nothing short of a shao-lin kung fu scene. This car still has a throttle cable, and practically came off the line with the check-engine light on. The upholstery is permanently stained with the detritus of an entire cities overweight, underpaid cops.

    Hacking my brakes wont work, the pedal goes to the floor to try and stop this 2 and a quarter ton house on wheels so if anything it might be an improvement. randomly triggering the accellerator, assuming one can do this in a vehicle with a throttle cable, will result in a godless heavy metal grunt from the engine as this 210 horsepower v8 struggles to maintain basic lane positioning. The AC hasnt worked since the clinton era, and mysteriously burps up pieces of foam. The door locks are mysterious and random enough already, and functionless for the rear passenger.

    --
    Good people go to bed earlier.
    1. Re:easier patch for younger drivers by sinij · · Score: 0

      While I suspect your post is intentionally humorous, driving rolling wreck is a choice. It isn't difficult or expensive to DIY basic repairs and maintenance, as such I have zero sympathy for someone driving with malfunctioning brakes, broken ignition lock, or most cases of drastic power loss.

      Autos are not categorically different from computing hardware and software. Just like you add RAM and SSD, patch OS and applications on your PC... you are expected to change oil, coolant, spark plugs and maintain your brakes. Interfaces are different, and it is almost always dirty/greasy, but it doesn't take rocket science degree to figure it out. Plus, there is almost always a YouTube video showing you how to do it.

      So stop with excuses and fix your rolling wreck. Just like you'd fix your PC if it was infested with malware.

    2. Re:easier patch for younger drivers by BESTouff · · Score: 1

      Mod parent up ! I peed my pants reading that post, congrats.

    3. Re:easier patch for younger drivers by c · · Score: 2

      Yes, but are you willing to take the risk of hackers changing the radio to a country and western station?

      --
      Log in or piss off.
    4. Re:easier patch for younger drivers by Khyber · · Score: 2

      "as a college grad with more debt than a south american country"

      Spotted the Economics Major!

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    5. Re:easier patch for younger drivers by Khyber · · Score: 1

      "Hacking my brakes wont work, the pedal goes to the floor to try and stop this 2 and a quarter ton"

      The registered weight for a Crown Vic made in 2001 is not even 2 tons.

      "3,946 lbs 2001 Ford Crown Victoria, Curb weight"

      So unless you got one with a railroad track segment welded to the back end, you aren't breaching 4500 pounds.

      Or do you weigh that much? They were land sleds big enough to accommodate people of that size, much like my old Ford LTD.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    6. Re:easier patch for younger drivers by nsuccorso · · Score: 2

      Fear not, my friend. In just 5 years (10 at the outside) you will automagically own a self-driving car! So sayeth the eager nerds who have no trouble reconciling a world which doesn't even have the collective will to maintain basic infrastructure with a complete sea-change in personal transportation! Future not available in all areas! Personal fates may vary!

    7. Re:easier patch for younger drivers by Anonymous Coward · · Score: 0

      Except unlike a PC, car repairs can get expensive. You can fix malware issues for free usually, however car parts are not. Sure you can buy used tires, goto the junkyard for some parts, and some repairs will require a mechanic. An old car needing repair can usually cost a few grand, and being in debt with student loans can make that cost way too high.

      Sure i fix my old cars but its hard, dirty work. I am getting older (still 31 but feel like 50) and doing all that work doesnt feel worth it, i got a good job now and am paying for a new car so i dont have to do major work for a while but not everyone has the credit or the income for that.

      ALSO NEW CARS SUCK!!!!

    8. Re:easier patch for younger drivers by sinij · · Score: 1

      Car repairs are only expensive if someone else does it for you, because then you have to pay labor. For example, bad brakes mentioned in the original post: you potentially have low or old brake fluid (very cheap), rusted and sticking calipers (preventable with fluid changes, have to replace or send to get remanufactured), damaged master cylinder (again, preventable with regular fluid changes, but need new part), bad disks/drums and/or callipers (wear and tear part), or bald tires.There is 66% chance that this could be solved with 10$ jug of DOT brake fluid, funnel, and a hose to siphon old fluid out.

      Any one of these issues could be solved for under $250 in used or new non-OEM parts. Only calipers and master cylinder R&R even remotely complicated (you have to bleed the system).

    9. Re:easier patch for younger drivers by Anonymous Coward · · Score: 0

      Any one of these issues could be solved for under $250 in used or new non-OEM parts.

      $250 on a car that cost $600?!

      At this level you want to be going to breaker's yards, not any kind of parts store.

    10. Re:easier patch for younger drivers by amiga3D · · Score: 1

      Most people today don't know what a ratchet or wrench is much less how to use one. It's not really that complicated and you can learn but it's so much easier to pay someone else to do it. I learned because I had no money to pay anyone. I once spent a cold winter night busting frozen knuckles changing the power steering pump on an old Chevy Malibu. I got the part for 10 bucks used at a junk yard and scrounged change for new power steering fluid. I was in tears by the time I got it on but it was necessity because it was all I could afford and I had to make it to work the next day. I love paying other people to do that shit now.

    11. Re:easier patch for younger drivers by Anonymous Coward · · Score: 0

      And having poor healthcare is a choice. All healthcare isn't difficult or expensive if you have a related terminal degree and enough organic chem experience to DIY solutions. As such I have zero sympathy for someone with any health problems.

    12. Re:easier patch for younger drivers by Anonymous Coward · · Score: 0

      > Autos are not categorically different from computing hardware and software.

      They are different. I've never seen the outside of a PC rust due to salt water exposure due to road gritting. The component count of a car is hugely higher. Diagnostics on older cars are not as good - you can't exactly run dimdecode on a Crown Victoria to get a print out of what is in it.

      > there is almost always a YouTube video showing ywo ou how to do it.

      And sometimes two of three with mutually exclusive methods for the same repair.

      And sometimes t

    13. Re:easier patch for younger drivers by Anonymous Coward · · Score: 0

      The parking brake mechanism on those models is particularly sketchy. There's a spring loaded mechanism toward the rear that is a "use it or lose it" mechanism. Any roadway that uses salt in the winter will corrode the shit out of that mechanism - and then you're putting in 3 new cables just for the parking brakes. I don't even want to know what a dealer would charge, but I know I would have been about 100-150 in parts just to replace.

      Once every 5 years.

      Never had a car do that to me before that one.

    14. Re:easier patch for younger drivers by k6mfw · · Score: 1

      Excellent essay, I wonder if you have good speaking voice and take up a position on Comedy Central, good humor with factual info (but one detail incorrect 2001 Crown Vics are from the Bush era, not Clinton, though the Ford CV didn't change much from late 1980s). One thing for certain, like a 486 machine, such a vehicle will never get hacked (why would anyone want to?).

      --
      mfwright@batnet.com
    15. Re:easier patch for younger drivers by sjames · · Score: 1

      The police package would add a few hundred pounds.

    16. Re:easier patch for younger drivers by Khyber · · Score: 1

      The police package (Interceptor engine, slightly modified transmission, external directional lights) adds about 150 pounds. I've installed plenty of those packages for regular security cars.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    17. Re:easier patch for younger drivers by sjames · · Score: 1

      Which would bring it to about 4100 pounds. 2 1/4 tons is close enough for a conversational post.

  15. Re:"Emergency Parking Brake"Re: FP by I4ko · · Score: 1

    It is a handbrake and nothing but a handbrake

  16. Already patched by fennec · · Score: 1

    From TFA: Green Car Reports reached out to Tesla Motors, which provided the following comment: ... We've already developed an update for the vulnerabilities they surfaced which was made available to all Model S customers through an over-the-air update that has been to deployed to all vehicles.

  17. Re: "Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    You obviously have no clue.

  18. They had physical access by sjbe · · Score: 2

    Any car or computer can be hacked when you have physical access to the car. Furthermore Tesla has apparently already issued a patch making this pretty much a non-event.

    When they get hacked remotely with no physical access (which is conceivable) then we should sit up and pay attention.

    1. Re:They had physical access by jbmartin6 · · Score: 1

      While true that this is a lot less worrisome than a remote attack, the fact that someone with an ethernet cable can bollix up the car it still attention worthy.

      --
      This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
  19. Idiot software developers by kbg · · Score: 4, Insightful

    The only reason why this is happening is because the software developers are morons. In a mission critical system you never give write access from an entertainment module to critical system. The information system should not have the ability to make any changes in the engine software. The best way to enforce this is to use a hardware read only bus that sits between the entertainment system and engine system and only allow traffic to flow from the engine to the info system but not the other way around.

    1. Re:Idiot software developers by Anonymous Coward · · Score: 0

      >software developers are morons
      >The best way to enforce this is to use a hardware read only bus

      Software developer design hardware? Perhaps you are the moron.

      In any case, modern IVI (in-vehicle infotainment) systems, at least the ones I worked on, already run on a separate processor and already have hardware filters preventing them from issuing unauthorized commands to the rest of the vehicle systems. Vehicle manufacturers already know full well that "software developers are morons".

    2. Re:Idiot software developers by Atomizer · · Score: 1

      They need to have security between the two systems, and from what I've read they do, but it isn't perfect. They problem with what you are proposing is that you can't change any engine/suspension settings that way. That's part of the feature set of the car. How would you turn on insane, or the new ludicrous mode?

      I think the bigger problem they need to fix is to start signing the downloads.

  20. Re: Vimax Asli Canada by Anonymous Coward · · Score: 0

    Mod parent up! The only reason the car is connected to the internet is so big brother can track you at all times you use the car.

  21. "to path the security flaw" WTF? by Anonymous Coward · · Score: 0

    'Path' is not a verb. WTF? "to path the security flaw"? Who talks like that?

    Oh, wait... AMERICANS. Fucking idiots.

    1. Re:"to path the security flaw" WTF? by Khyber · · Score: 1

      Guess you never heard of bot pathing in games. To path a bot is to program it to follow a specified routine.

      Catch up with terminology, and keep your mouth shut until you understand the words being spoken.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    2. Re:"to path the security flaw" WTF? by nsuccorso · · Score: 1

      Typos are uniquely American...

  22. Re:"Emergency Parking Brake"Re: FP by JazzLad · · Score: 4, Funny

    I use is in emergencies all the time in the winter. Every time I'm in a parking lot after a fresh snow, I urgently need to do 90 and 180 degree turns repeatedly. I assumed that was what it was for as it works perfectly - what do you use it for?

    --
    "If you have nothing to hide, you have nothing to fear." - Every fascist, ever
  23. Re:"Emergency Parking Brake"Re: FP by Maxwell · · Score: 4, Informative
    Your outrage is misplaced. You can indeed use the emergency brake in an emergency. I have done it. Many others have. It's not great, but it works.

    When hydraulic brakes were introduced there was concern that if they failed, the driver would have no way to stop the vehicle. So, regulations were added to require every car with hyrdaulic (or electric) brakes to also have an Emergency brake that was totally manual and not connected to the hydraulic system. This was to satisfy FMVSS 105 (now replaced with FMVSS 135):

    " Vehicles shall be capable of stopping under partial failure of the service brake system, inoperative brake power assist unit or brake power unit, antilock failure, variable proportioning valve failure, and with the engine off"

    There is a maximum distance and pedal pressure specified.

    FMVSS 135 also states:

    "Each vehicle shall be manufactured with a parking brake system which, when engaged, shall be capable of holding the vehicle stationary on a specified grade for a specified time. "

    I have never seen a passenger vehicle with two separate systems, so the Emergency Brake is also the Parking Brake. Or handbrake if you prefer as it is manual brake.

    Why would you NOT use the e-brake in an Emergency? You are barrelling down the highway at 70mph when your oil filter lets go. Your engine overheats and fails within seconds. Do you a) do nothing or b) use the ebrake to slow down and pull over? why would you not want to save your own life?

  24. Re:Still not up to Lucas level of electronic secur by VAXcat · · Score: 2

    But it won't require as much replacement wiring smoke as the Lucas electronics did. http://www3.telus.net/bc_trium...

    --
    There is no God, and Dirac is his prophet.
  25. Old cars can be hacked much easier by Anonymous Coward · · Score: 0

    Old cars can be hacked with a hammer, saw, screwdriver etc. The only difference is that once hacked you have remote control of some of the functions.

  26. Editor? What editor? by gstoddart · · Score: 5, Informative

    Tesla's already issues a software update that owners can download to path the security flaw

    Can we stop calling you guys 'editors', and just get on with 'clowns who post story submissions'.

    Because it's quite clear you don't actually, you know, edit.

    --
    Lost at C:>. Found at C.
  27. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 1

    Why would you NOT use the e-brake in an Emergency? You are barrelling down the highway at 70mph when your oil filter lets go. Your engine overheats and fails within seconds. Do you a) do nothing or b) use the ebrake to slow down and pull over? why would you not want to save your own life?

    Because locking my back wheels at 70mph isn't going to end well for me. I'd use the normal brakes (which still work fine without the benefit of servo assist) so at least I'd have partial steering.

  28. Re:"Emergency Parking Brake"Re: FP by Applehu+Akbar · · Score: 1

    I have actually used the handbrake as a backup brake after a total brake failure (Volkswagen Rabbit, the Segway of cars). Yes, it's an emergency brake.

  29. engine failure scenario not realistic by Anonymous Coward · · Score: 1

    Having been in several situations with complete loss of oil (one on the road, others in the shop), I can assure you that complete loss of oil pressure does not lead to engine stopping in any reasonable time. Permanent engine damage, yes. Not able to restart, yes. Stops when dropping to idle throttle. But it happily keeps running (and starts making the most unusual noises), especially if the throttle is open.

    There are lots of stories of people coming into gas stations/shops/etc with "I noticed this red light on the dash that says OIL" (or equivalent), and when the dipstick is pulled, it's dry.

    There are also lots of cases of "oil change but forgot to put the drain plug in, or forgot to refill with oil, because we got distracted". An amazing number will run for a while (causing bearing damage, and needing expensive repairs).

    Ditto for coolant loss.

    A friend used to work in a commercial vehicle establishment, doing lots of engine rebuilds/replacements. A standard amusement was to cut the radiator hoses off, drain the oil, start the engine, put a brick on the pedal, and see how long it would run, before pulling the engine for the rebuild. After seeing this a couple times, I realized that there is great durability in modern cast iron engines. Sure, the main bearings are shot, but that's about it. Whether an aluminum block, aluminum head engine would be rebuildable, I don't know. The temperature extremes in the bearing areas might alter the metal and warp it beyond rebuildability.

  30. When did Samzenpus develop this lisp? by Anonymous Coward · · Score: 0

    Sorry Sam.... the second to last sentence is one for the record books.

    Tesla's already issues a software update that owners can download to path the security flaw.

    !=

    Tesla HAS already ISSUED a software update that owners can download to PATCH the security flaw.

    1. Re:When did Samzenpus develop this lisp? by Anonymous Coward · · Score: 0

      Thuferin' thucotash!!

  31. Only going to get worse by Doghouse13 · · Score: 4, Interesting

    OK, so there's a security patch available. So what? "We regret that you crashed at 85mph yesterday - please download our latest patch?" The problem is not the software per se, but the mere fact that there's external access at all. Because there's simply no such thing as "flawless" code. And the internet's been around long enough to show us that, if there's any legitimate way in, people who want to abuse the system will get in as well, and find a way to subvert it. And right now all we're seeing are "white hat" attacks; just wait until the black hat guys start getting creative.

    1. Re:Only going to get worse by sinij · · Score: 3, Interesting

      We have seen this play out in IT during 80s and 90s. AV and Firewalls for cars are next. Then they will wise up and move cars to a dedicated network with mutual authentication. Until then, we have 'lost decade' of blue-screen-of-death automobiles. Unfortunately, unlike mostly harmless IT crashes, when auto crashes someone going to get hurt.

  32. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Why would you NOT use the e-brake in an Emergency? You are barrelling down the highway at 70mph when your oil filter lets go. Your engine overheats and fails within seconds. Do you a) do nothing or b) use the ebrake to slow down and pull over? why would you not want to save your own life?

    The best option if you need to stop suddenly in that scenario is c) press down harder on the brake pedal to stop the car because the engine not running does not disable the hydraulic brakes, but only disables the power boost. The brake pedal will take more pressure to use, but the brakes will still work just as effectively.

    You also left out d) downshift and let out the clutch, e) slam car into park, and the most likely correct response f) coast to a stop since you're on a highway going 70mph and, the vast majority of the time you're doing that, stopping immediately isn't necessary for safety.

  33. Re:"Emergency Parking Brake"Re: FP by perryizgr8 · · Score: 1

    Why can't you just use the normal pedal brakes? They are still more powerful and easy to control even without the power assist.

    --
    Wealth is the gift that keeps on giving.
  34. Welcome to the new world? by mark-t · · Score: 4, Insightful

    Welcome to the new world where cars can be hacked thanks to all their electronics.

    As opposed to the old world where a car that didn't have any sophisticated electronics was trivial for someone to steal?

    1. Re:Welcome to the new world? by sinij · · Score: 1

      Are you saying that the only way to secure a car from theft is to network it? That is nonsense.

    2. Re:Welcome to the new world? by mark-t · · Score: 1

      I'm saying that this so-called "new world" isn't really new... cars have always been hackable.

    3. Re:Welcome to the new world? by steelfood · · Score: 1, Interesting

      It's another attack vector, on top of all the existing attack vectors.

      The attack vector these electronics close is hotwiring under the dash. This kind of attack doesn't happen as much as you think. More likely, people go for the GPS unit or something other item that's left out in the open, or your wheels and other easily-accessible parts. Stealing whole cars is rarer, unless you've got some collector's piece, and stealing whole cars via hotwiring is very rare. For stealing whole cars, there's a lot of low-hanging fruit, namely people who forget to lock their doors, people who more than crack their windows, or people who habitually keep the keys inside their car. And people who do steal whole cars for a living (usually for getting to less-accessible but more expensive parts) will have the equipment to be able to gain entry anyway, so it hardly matters.

      The additional electronic security may close one or two attack vectors, but it doesn't close all of them, and certainly not the most important ones. So now the question becomes, is closing the one or two attack vectors worth the additional (literally) thousands of dollars worth of electronics as well as introducing an additional unknown quantity of electronic attack vectors?

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    4. Re:Welcome to the new world? by Anonymous Coward · · Score: 0

      Are you saying that the only way to secure a car from theft is to network it? That is nonsense.

      It is saying the IQ of car theives has shifted from below 100 to above 130

    5. Re:Welcome to the new world? by mark-t · · Score: 1

      stealing whole cars via hotwiring is very rare.

      Right... but it didn't used to be. That's my point... there's nothing new under the sun here.

    6. Re:Welcome to the new world? by goose-incarnated · · Score: 1

      Welcome to the new world where cars can be hacked thanks to all their electronics.

      As opposed to the old world where a car that didn't have any sophisticated electronics was trivial for someone to steal?

      Trivial to steal is not the same as impossible to hack. I'd rather have my car stolen than remote-controlled, thank you very much. It takes a very special kind of stupidity that prefers to be have their car remote-controlled over being stolen.

      --
      I'm a minority race. Save your vitriol for white people.
    7. Re:Welcome to the new world? by goose-incarnated · · Score: 1

      stealing whole cars via hotwiring is very rare.

      Right... but it didn't used to be. That's my point... there's nothing new under the sun here.

      Remote-controlled while you're behind the wheel is "nothing new"? What the hell are you smoking?

      --
      I'm a minority race. Save your vitriol for white people.
    8. Re:Welcome to the new world? by steelfood · · Score: 1

      You just increased your attack surface while offering marginal benefit. The increase in attack surface is certainly new.

      You're also paying additional for it, both during purchase (to recoup the manufacturer's R&D investment and for the additional physical components), and then afterwards as part of the car's maintenance. The additional costs associated with the additional components is also new.

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    9. Re:Welcome to the new world? by mark-t · · Score: 1

      My point being that cars were always "hackable".

    10. Re:Welcome to the new world? by mark-t · · Score: 1

      I'm not suggesting that it is... my challenge was not on the methodology of the hack, my challenge was on the notion on the statement "Welcome to the new world where cars can be hacked", because in actuality, there's nothing new about it at all.

    11. Re:Welcome to the new world? by mark-t · · Score: 1

      My point was that cars having "hackable electronics" is not a particularly new world, because even before they had computers in them, they were still very "hackable".

    12. Re:Welcome to the new world? by goose-incarnated · · Score: 1

      I'm not suggesting that it is... my challenge was not on the methodology of the hack, my challenge was on the notion on the statement "Welcome to the new world where cars can be hacked", because in actuality, there's nothing new about it at all.

      Then let me make OP's statement more accurate in terms you can't actually call "not new".... "Welcome to the new world where your car can be remote controlled as part of a botnet run by a single person".

      There is a damn big difference between a car that is stolen and one that is controlled; I have no idea at all why you'd equate the word "hacked" with "broken into" rather than "exploited". Can you possibly explain it yourself?

      --
      I'm a minority race. Save your vitriol for white people.
    13. Re:Welcome to the new world? by mark-t · · Score: 1

      Because back in the day, stealing a car required "hacking" too, just hacking of a different type.

  35. Re:"Emergency Parking Brake"Re: FP by drinkypoo · · Score: 1

    Why would you NOT use the e-brake in an Emergency?

    Because locking my back wheels at 70mph isn't going to end well for me. I'd use the normal brakes (which still work fine without the benefit of servo assist) so at least I'd have partial steering.

    Yeah, that wasn't actually a great example. Here's a better one. You're driving down the highway, go to push the brake pedal, and the pedal falls off, the linkage to the master breaks, the plug works out of the master and the piston shoots out, powered by a stout steel spring. What do you do? Yeah, sure, you downshift. That's it?

    You or I can reasonably push down the brakes well enough to stop even without servo assistance. At least, I know I can. But in a lot of vehicles, it's very difficult, and not everyone is physically capable of doing that. They should have a second option. And that is why EPBs are evil. They are either on or off. The only thing you can do with them, if you're even allowed, is lock them. A normal parking brake can be partially applied. There's quite a bit of stretch in the cables, so you can moderate clamping force. I know, because I've done it in a car with a proper handbrake. And I will say this to you, and you can believe it or not, but I've never made a "handbrake turn". I've made some power-assisted U-turns before, but only in situations where power and traction levels meant that I could do it either from a near-standstill with throttle alone (or perhaps with some clutch) or while in motion by using the "Scandinavian Flick". But I have played with the handbrake to see whether it was possible to stop a car with it from a good clip safely, and the answer is yes. I imagine it would be tricky to do properly with a foot brake; if you got carried away, you'd probably already be sideways before you found the release.

    I played with stopping with the handbrake in a 1989 240SX, which has an ordinary handbrake and doesn't weigh much. But my Audi A8 is first-generation and also has a real handbrake, I don't see why I wouldn't be able to use the same technique there in spite of it being a much heavier car. It also has much larger rear brakes.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  36. it's 'patch' not 'path'. by Anonymous Coward · · Score: 0

    There's a typo in the post.

  37. Instead of being hacked by Anonymous Coward · · Score: 1

    Why not just have a standard, open and documented interface that allows owners and users to do all of this.

    For example, when everyone has easy access to know how to activate the parking brake from a computer or chip plugged into the car then it's not a huge deal that someone "hacked" it.

    At that point everyone realizes that these things work like that and that you have to have cable access to make a change.

    For the paranoid worried about someone changing the code (making the parking brake not work with the normal lever), give them the ability to reflash the code on the car.

    It's the same thing as someone being able to disconnect the cable for a cable operated parking brake because they have the knowledge of how to do it and the owner or driver does not and does not take the time to check things like that.

    We should be for knowledge over ignorance and closing the software (or creating an enigma machine for pulling a cable) doesn't work.
    Making a big deal out of it is not the way to go.

  38. Re:"Emergency Parking Brake"Re: FP by dryeo · · Score: 1

    My parking brake is foot operated.

    --
    https://en.wikipedia.org/wiki/Inverted_totalitarianism
  39. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    What happens if you have a brake line blow out or the master cylinder fail?

    If you're engaging it hard enough to lock the wheels you are an idiot.

    The correct procedure would be to engage it gradually and partially (not slamming it all the way to full lock) until the vehicle slows and comes to a stop then you engage it the rest of the way to keep the car stationary while you get out and empty your shorts. If you are driving a standard you also downshift to use the transmission to help slow you to a speed low enough to pull off the road safely.

    How did you ever pass drivers ed and get a license?

  40. Kristin Paget by Anonymous Coward · · Score: 0

    I remember Kristin Paget (quite a marvel of self-promotion IMO) beating her own drum when she recently moved from a security role at Apple to Tesla. I think at Tesla (and previously at Apple) her title was something like "Hacker Princess".

    Guess she either doesn't really know her stuff, or didn't have much of an impact at Tesla.

    I went to check her Twitter account (https://twitter.com/KristinPaget), curious to see what her response to this news is, only to see that she's already moved on to SalesForce (again as a "Hacker Princess" per her business card). After calling the Tesla position a dream job, this seems like a very odd move in such a short time. Maybe she's better at talking than performing.

    NOTE: Even though she is transgender, this comment has nothing to do with that. In fact, I respect her courage for being herself. But I always thought she was a little too impressed with herself.

  41. Re:"Emergency Parking Brake"Re: FP by U2xhc2hkb3QgU3Vja3M · · Score: 1

    How did you ever pass drivers ed and get a license?

    Maybe he eats a lot of Cracker Jack.

  42. Ah ha ah ahahahahahahaa by Anonymous Coward · · Score: 0

    I remember being laughed at and ridiculed on this site when I said this would be a problem and turning over your driving to a computer would just make this issue worse. *flicks bird*

  43. "Gotcha" Tech Journalism by Anonymous Coward · · Score: 0

    Such sensational headlines. Really.

  44. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Grampaw here.

    Go back even further, kids. When I was your age, your great grandmother drove a 1964 Cadillac Coupe de Ville (Sea Mist green with white leather upholstery and matching vinyl roof. She was a beauty.) Last American car to have fins. And it was big. BIII-IIIIG. Like, had it own gravity field big. Mom was not. She was tiny.

    The brake pedals on those cars were, therefore, double wide. Not, as one would suspect, to make it easier to hit the brakes, but rather accommodate two feet in order to maximize the likelihood that a tiny Mom could stop the car without power assist.

    Parking/ emergency brakes generally only provide (or used to, when I cared enough about to read about these things) 30% of the full braking system force. But it was enough to give you something to do with the functioning 5% of your mind while the other 95% screamed in terror as you plummeted toward something in 2.5 tons of steel with nothing between you and being impaled on the steering column and diced by a steel steering wheel but a lap belt. No headrest, either.

    Punks.

    Later I'll tell you the story of the first parking brake ever used in the State of Michigan. It's a knee-slapper!

  45. Re: Vimax Asli Canada by Anonymous Coward · · Score: 0

    No they haven't, the only difference this connectivity does is make the hacks easier. Physical access to the cars allowed hackers to do this YEARS ago.

  46. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    No, you're just built funny.

  47. Should be pretty secure by sjbe · · Score: 1

    Oh thank God. I have no idea why everyone doesn't do this wirelessly - cuz on the air updates are perfectly secure.

    Unless someone has physical access to the car they should be very secure as long as the encryption algorithms used are secure. Key distribution isn't a problem because Tesla can load up the car with a cryptographic key during manufacturing. Hell they could even put in a stack of one time pads if they wanted. Key distribution is usually the big problem but it's not (or shouldn't be) an issue here.

    While they could always make an error somewhere along the way, it should be reasonably straightforward to make the OTA updates very secure under most circumstances.

    1. Re:Should be pretty secure by Ol+Olsoc · · Score: 1

      Oh thank God. I have no idea why everyone doesn't do this wirelessly - cuz on the air updates are perfectly secure.

      Unless someone has physical access to the car they should be very secure as long as the encryption algorithms used are secure.

      "Should" is the operative word here." As long as" is another.

      Because people are trusting their life to a system that has consistently proven that it is not secure. It should be, but isn't. As long as no one discovers exploits, it should be safe.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    2. Re:Should be pretty secure by AaronW · · Score: 1

      Which is why the hackers first had to get physical access to the car in order to hack it. They were not able to hack it remotely until they first gained physical access to the internal Ethernet network.

      --
      This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
  48. Physical access is the concern, not ethernet by sjbe · · Score: 1

    While true that this is a lot less worrisome than a remote attack, the fact that someone with an ethernet cable can bollix up the car it still attention worthy.

    If a bad guy has physical access to my car, what they can do with an ethernet cable is frankly the least of my concerns.

    1. Re:Physical access is the concern, not ethernet by KGIII · · Score: 1

      If I ever stumble, bleary eyed, out to the now-noisy garage to find some person with an ethernet cable connected to my car (instead of just, you know, stealing it) I am going to be damned curious and probably help them. I am supposing that they had something attached to the end of the ethernet cable. I will probably want to help. Maybe they are some eco-nut group hacking me to give me greater efficiency.

      --
      "So long and thanks for all the fish."
  49. Re:"Emergency Parking Brake"Re: FP by 0100010001010011 · · Score: 1

    Yeah, that wasn't actually a great example. Here's a better one. You're driving down the highway, go to push the brake pedal, and the pedal falls off, the linkage to the master breaks, the plug works out of the master and the piston shoots out, powered by a stout steel spring. What do you do? Yeah, sure, you downshift. That's it?

    You turn the car off and leave it in gear.

  50. I hear by Ol+Olsoc · · Score: 1

    Adblock, Better Privacy and NoScript is coming out for cars - to be released later this year.

    --
    The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  51. Old cars and custom cars still exist by sjbe · · Score: 1

    Not going to happen, both the EPA and the CAFE standards have seen to that. There is ZERO chance you can meet the emission and mileage standards for any vehicle which doesn't include some kind of engine and drive train control electronics.

    Those only apply to new cars. Old cars are still on the road and probably always will be. Plus you are able to build vehicles yourself that do not meet emissions standards. Not exactly difficult to source an engine and a chassis.

  52. Commander Adama was right by thedavidcathey · · Score: 2

    The only way we are safe from the Cylons is to not network all the systems in the ship together.

    1. Re:Commander Adama was right by ihtoit · · Score: 1

      that's one step, but it's not the whole story. If a system can be mechanical rather than computerised, do that as well. Fuel injection can be mechanical. Early German fighter planes used mechanical fuel enjection. Spark timing? Unnecessary in a diesel. Hell, for that matter a diesel doesn't even need a battery. You can power headlights and the radio from an alternator.

      --
      Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
  53. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    I have very fond memories of cracker jacks and the crappy prizes they put inside.

  54. Re:Editor? What editor? by swillden · · Score: 1

    Tesla's already issues a software update that owners can download to path the security flaw

    Can we stop calling you guys 'editors', and just get on with 'clowns who post story submissions'.

    Because it's quite clear you don't actually, you know, edit.

    They edit, meaning that they modify the text. The thing is that they generally make it worse, not better.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  55. Car Hacking by MagickalMyst · · Score: 1

    Car hacking is the most ridiculous thing i've ever heard of!

    Seriously, why do we need computers in cars? EFI I can understand; some digital sensors, maybe, a and quartz tuned radio with digital display, sure.

    But all of this other crap is just asking for trouble. The fact that someone could remotely access, monitor, and even control your vehicle is downright scary.

    --
    Political correctness is really just herd psychology pushed by insecure people who desperately seek social conformity.
  56. Re:"Emergency Parking Brake"Re: FP by sjames · · Score: 1

    Actually, I *HAVE* used the emergency brake in an emergency. I stepped on the brake pedal and nothing happened so I carefully used the emergency brake to come to a safe stop. It sure worked as an emergency brake for me.

    Now don't you feel dumb?

  57. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Surviving after my brake lines suddenly corroded.

  58. Obsolete technology by sjbe · · Score: 1

    The last time my 80s era roadster was patched was when it rolled off the production line. 30+ years on the long-term stable release! Beat that with your Tesla.

    That's like bragging that you haven't patched your 486DX computer in 25 years. It's an obsolete POS and nobody is really impressed. Do you still use a Motorola MicroTAC phone or an Apple IIe too?

    Why do we need to connect cars to the internet again?

    Because you can do interesting and useful things by connecting to the internet. Up to date weather, traffic, and map data. Streaming media, OTA updates, OTA patches, inter-vehicle communications, and much more. Seriously you can't think of any use for internet connectivity in a vehicle?

    1. Re:Obsolete technology by Anonymous Coward · · Score: 0

      no its like bragging that your 486 DX can still outperform your brand new i7 without crashing and getting hacked... i think that is the better analogy.
      the car from the 80's 70's 60's 50's 40's 30's is still not OBSOLETE.
      you are an idiot if you believe that, and i would suggest you snuggle up to your next maxiPad which has rendered your last maxiPad useless.
      because i am sure having your maxiPad connected to the internet is the right decision.

  59. Re:"Emergency Parking Brake"Re: FP by sjames · · Score: 2

    The ebrake will NOT lock your wheels up as long as you have a bit more finesse than an angry gorilla. Press and hold the button in and lift the lever until you feel it begin to grab. Do not yank the lever up like an idiot.

  60. .. Michael Hastings. by Anonymous Coward · · Score: 0

    enough said.

  61. Emergency/Parking Brake Hack? by bjwest · · Score: 1

    Isn't the emergency/parking brake required to be mechanical? How can you hack a mechanical cable-pulley system?

    And this is why it's called an emergency brake here. Unlike the hydraulic braking system, it's supposed to be able to work no matter what. It's also only connected to the rear wheels, so there's less of a chance the idiot who slams it on will lose control.

    --

    --- Keep the choice with the user..
    1. Re:Emergency/Parking Brake Hack? by certsoft · · Score: 1

      Apparently not. Electric Parking Brakes seem to be common on upscale vehicles.

      https://en.wikipedia.org/wiki/Electric_Park_Brake

  62. Re:"Emergency Parking Brake"Re: FP by Letophoro · · Score: 1
    From personal experience, I can say that the parking brake is the emergency brake.

    In my 1986 Samurai, there was a small proportioning valve that split the brake fluid pressure to apply more to the front than the back. When I was exiting a parkway, that valve decided that rather than send the fluid to the brakes, it would just be better to dump it on the ground. Fortunately, I was able to use the manual transmission and the wire-connected emergency/parking brake to stop safely.

  63. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Great until you need to use the clutch and whichever brake it is you use when the vehicle is stopped... Oh wait.

  64. We trust our lives to a lot of things by sjbe · · Score: 4, Insightful

    Because people are trusting their life to a system that has consistently proven that it is not secure

    You know what else I'm trusting my life to? You not turning your steering wheel a quarter turn left when we pass each other on the road. I'm trusting that you will actually stop at a stop sign. I'm trusting that my airbag will not malfunction. I'm trusting the ignition to actually work. I'm trusting that you are capable of driving competently unimpaired by alcohol. We trust our lives to a lot of things that have consistently proven to not be secure and this bit of hacking is no where near the top of the danger list. Sure, let's be concerned about it but let's not blow it out of proportion either.

    1. Re:We trust our lives to a lot of things by Kokuyo · · Score: 1

      You need to be upvoted all the way to mars. Seriously, common sense is a rare thing on the net.

    2. Re:We trust our lives to a lot of things by Ol+Olsoc · · Score: 1
      But you see, my imbued with Common sense and more intelligence than I chachalaca......

      If I turn my steering wheel the wrong way, or if I run a stop sign, or even if I'm driving drunk - If i plow into your trusting kester, I might just kill myself as well. I have a really really good reason not to do any of that stuff because I have skin in that game. So that's nota reall good argument except in the case of a suicidal driver.

      The concept of people who have a vested interest in surviving does not equal the concept of people doing things for the lulz.

      The idea that you trust your ignition key to start the car is just silly.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    3. Re:We trust our lives to a lot of things by Anonymous Coward · · Score: 0

      Difference is, if I hack your car remotely, I'm not potentially forfeiting my own life to end yours by crashing my car into yours

  65. Proofread much? by Anonymous Coward · · Score: 0

    Seriously.

  66. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Because locking my back wheels at 70mph isn't going to end well for me.

    Looks like someone's been watching too many Transporter movies.

  67. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Because locking my back wheels at 70mph isn't going to end well for me.

    Not if you slowly engage the emergency brake. It works fine for the intended purpose.

    There was a time when we had automobiles without ABS. If you pressed the brake peddle too hard and too fast, you'd lock up the wheels more than you could have ever achieved with a hand brake.

    The emergency brake (a.k.a. parking brake) in most cars are simple mechanical devices that use steel cables to engage the brakes to the rear wheels only. They are not power assisted and you'd have to pull really really hard and fast to be able to lock up your rear wheels. Your front wheels will still roll and able to steer the car.

  68. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Looks like the angry anonymous poster isn't as smart as the "idiot American" drivers that he criticized.

  69. Re:"Emergency Parking Brake"Re: FP by morgauxo · · Score: 1

    Then what would you recommend one do if their brake fluid leaks out?

    The emergency brake works via cable. It will pretty much always work. Pop a leak somewhere and the rest of your braking system.. being hydraulic becomes useless quickly. That's why we call it an emergency brake!

    The trick is you don't just yank the handle up and set it like you would when you park on a hill. Stay calm. Keep your finger on the button, you don't want it locking!. Ease the handle up carefully. Don't suddenly force it when you start to feel the resistance.

    I haven't had to do this us this in an oncoming traffic, imediate sort of emergency. I have practiced it under more controled conditions so that I would be ready if I do. I did use my e-brake to drive home once when I blew a brake cylindar. Fortunately I noticed this before I was up to speed so I was able to take it very easy and didn't have to use the e-brake for any sudden, unexpected stops.

  70. Re:"Emergency Parking Brake"Re: FP by morgauxo · · Score: 1

    What a stupid strawman!

    Why would you lock your back wheels? Have you actually ever tried your emergency brake? No car I have ever owned is capable of applying enough stopping power to actually lock the wheels. It only slows them down.

    Also.. don't yank up on it. You wouldn't slam your foot brake at that speed would you? Hold the button down on your emergency brake so that it doesn't lock and ease it up just like you would with your foot!

  71. My lab has issued a solution to this already by Anonymous Coward · · Score: 0

    Don't connect cars to the internet. Don't make their electronics accessible OTA.

    We'll be presenting how to do this at DEFCON this year.

    We're honored to be recognized with the 2015 People's Award for Self Restraint, Circumspection and Common Sense.

    See you there.

  72. True Hack? by Anonymous Coward · · Score: 0

    Is this a true remote hack or does this require malware or direct access to the car to install a usb device like most others? Yes, I didn't read the article, because I expect slashdot to summarize it for me.

    Flame away

  73. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    Many ebrakes are a ratcheting foot pedal, not a hand brake like you describe. Releasing the foot pedal often requires leaning down to reach the release, which means you are no longer in an optimal position to control the car that you are apparently having problems with.

  74. Re:Editor? What editor? by Anonymous Coward · · Score: 0

    How about posting a summary with actual information instead of directing me to off slash questionable sites. That would be great.

    and also maybe turn on spell / grammar check because some of these posts are getting pretty unreadable. This one isn't that bad though

  75. Tesla's OTA and The Obvious by WOOFYGOOFY · · Score: 2

    Don't look to Tesla to change the OTA acccess their building into their cars any time soon. I'll tell you why.

    There's a frightening amount of electricity generated by their cars and mechanics who don't know what they're doing are quite likely to eletrocute themselves.

    Then the headline will be:

    Another Mechanic Killed By Tesla Car.

    To prevent that headline from ever materializing and destroying their market share, they reserve the right and aiblity to remotely brick the car.

    If the car is in an accident, it gets bricked and the only result of trying to start the car is a message on the instrument panel which reads (approx) : "Take car to Tesla service station for service".

    Mechanics CAN'T work on Tesla cars.

    Unfortunately, when you connect a car to the internet or otherwise make it accessible OTA you dramatically increase the attack surface area.

    Here's a few characterisitics of the new attack vectors:

    *A criminal can effect many cars at once. Previously, a 1:1:1 ratio existed between criminals, cars and some discrete unit of time.

    *A criminal can make a criminal event imitate an accident. Previously, if the car blew up Mafiosa-style or was stolen, the criminal event was clearly recognizable as a criminal event. Even cutting the brake lines left tell-tale signs. Obviously, a surreptitious way to access the car's electronics is, well, surreptitious .

    *The attack vectors have mutiplied to as many zero-day exploits in as many electronic parts as could be effected by zero day exploits. Previously, even if there was a theoretical way to access the computer that controlled critical systems, it was still a head-under-hood affair involving that system.

    *Zero day exploits aren't going away. There is no "recall" that is going to "fix" the problem because the problem is now a changing target. Previously, just as criminals and car thefts (or other crime) were 1:1, so also were defects and defective components. Recalls could fix the componnt and return the car to service. Now the subsystem is known to be fundamentally unfixable.

    If we could stop people from exploiting critical computer systems, we would have done it. A car is not going to be special in this regard.

  76. Re:"Emergency Parking Brake"Re: FP by sjames · · Score: 1

    It *IS* awkward but I have actually done exactly that. The handbrake is preferable for that situation, but the foot operated brake is usable in a pinch.

    You can always push it down slowly to stop, and then release it.

    This is something everyone should practice in a safe area just in case. It's part of being a safe driver.

  77. journalist Michael Hasting's death by Rujiel · · Score: 1

    Hastings was a large adversary for the military industrial complex. When his BMW sped out of control and crashed a couple years ago , most who mentioned auto hacking were labelled conspiracy theorists. How's that looking now? not that whatever technique was used there had to be very high tech.. he even expressed concerns that his car had been tampered with.

  78. Re:"Emergency Parking Brake"Re: FP by sjames · · Score: 1

    Using the foot pedal *IS* awkward but I have actually done it successfully. A handbrake is certainly preferable.

    Every driver should practice this in a safe area just in case. It's part of knowing your vehicle and being a safe driver.

  79. I don't understand this irresponsible reporting by PRMan · · Score: 1

    With physical access to the car, I can literally take control of ANY car and then run it remotely. I can put plastic explosives under the dash and hook it up to the ignition wire. For the last 100 years. How is it a hack once you've had physical access? There are James Bond movies from the 60s with this as a plot point.

    --
    Peter predicted that you would "deliberately forget" creation 2000 years ago...
    1. Re:I don't understand this irresponsible reporting by AaronW · · Score: 1

      Exactly. I've run port scans against my Model S and there are no open ports. All communication is over OpenVPN making remote hacking much more difficult. As has been stated elsewhere, the researchers first needed physical access to the internal Ethernet network of the car.

      --
      This post is encrypted twice with ROT-13. Documenting or attempting to crack this encryption is illegal.
  80. Re:"Emergency Parking Brake"Re: FP by viperidaenz · · Score: 1

    unless the car has an automatic transmission.

  81. Re:"Emergency Parking Brake"Re: FP by goose-incarnated · · Score: 1

    Why would you NOT use the e-brake in an Emergency? You are barrelling down the highway at 70mph when your oil filter lets go. Your engine overheats and fails within seconds. Do you a) do nothing or b) use the ebrake to slow down and pull over? why would you not want to save your own life?

    Because locking my back wheels at 70mph isn't going to end well for me. I'd use the normal brakes (which still work fine without the benefit of servo assist) so at least I'd have partial steering.

    I've safely stopped a car from 120km/h when the hydraulic braking system failed by using the emergency brake. You use it gently to slow down, and gear down as well. There is no need to yank it all the way up - you can modulate the pressure you exert so that the wheels never lock up.

    --
    I'm a minority race. Save your vitriol for white people.
  82. Re:Still not up to Lucas level of electronic secur by Anonymous Coward · · Score: 0

    Ah yes good ol' Lucas..
    As my dear old dad who's been a mechanic for almost 50 years likes to complain:

    "Lucas lighting systems must have been the first company to ever patent Darkness "

  83. Re:"Emergency Parking Brake"Re: FP by drinkypoo · · Score: 1

    You turn the car off and leave it in gear.

    unless the car has an automatic transmission.

    Yep. Last I looked over a decade ago, only 40% of cars sold in the USA were even offered with a manual gearbox; Today, that number is even less. It's not just the USA that isn't buying them, either. Now that DSGs are so phenomenally good, there's really no reason for anything else to exist except in the very cheapest of cars — and they're "all" getting CVTs — nearly all, anyhow. But loads of cars still have traditional slush boxes, because they're the cheapest way to get a lot of torque to the wheels, and we love torque.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  84. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    In most cars, the brake pedal works exactly one time after the engine is off. If you let up on the brake, the next push will push the pedal straight to the floor with little to no effect.

    I've seen accidents caused by the lack of this knowledge. I've personally avoided one accident in a stalled vehicle with this knowledge. You might find it useful too.

  85. Model S hacked by Geeky+Don · · Score: 1

    The article says that Tesla has "already issued a software update that owners can download..." The update is automatically delivered over the air directly to the car. The owner doesn't need to request anything.

  86. So they had to be INSIDE the car to "hack" it... by romanval · · Score: 1

    From TFA: "Mahaffey and Rogers acknowledged that they first had to gain physical access to the Tesla in order to accomplish their hack, requiring a physical connection via Ethernet cable that then allowed them to access the Model S remotely."

    In the olden days this was called "hot wiring"...

    The point is: all bets are off when one has physical access. Even if they don't "hack" it, they can set it on fire or do anything else.

  87. Re:"Emergency Parking Brake"Re: FP by 0100010001010011 · · Score: 1

    Shut off your automatic transmission on the highway and tell me what your car does.

  88. Re:"Emergency Parking Brake"Re: FP by BadgerRush · · Score: 1

    Emergency brake is not a binary (on/off) switch, but instead a lever that lets you apply variable pressure to the brakes in order to slow down without locking your back wheels. I know that you may be young and only used to modern ABS brakes, so the concept of having to personally restrain how much you apply the brakes in order to not lock the wheels may seem like something alien to you, but that is exactly how all brakes (including the pedal) worked until the 80s' or 90s'.

  89. Hack my bicycle. by ihtoit · · Score: 2

    Bring it.

    --
    Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
  90. Re:"Emergency Parking Brake"Re: FP by viperidaenz · · Score: 1

    The control unit releases the pressure on all the clutch solenoids, shifting it to neutral?

  91. Re:"Emergency Parking Brake"Re: FP by dryeo · · Score: 1

    Good point, when I first started driving I used to use the (hand operated) parking brake to prevent rolling back when starting on a hill. One foot on the throttle, other foot on the clutch and one hand on the handbrake. Release brake while releasing the clutch and applying throttle. Handy when learning where hills are very steep.

    --
    https://en.wikipedia.org/wiki/Inverted_totalitarianism
  92. Re:"Emergency Parking Brake"Re: FP by perryizgr8 · · Score: 1

    I don't think this is correct.

    --
    Wealth is the gift that keeps on giving.
  93. Re:"Emergency Parking Brake"Re: FP by rpstrong · · Score: 1

    You needn't turn it off; just ease it carefully into 'Park'.

  94. Re:"Emergency Parking Brake"Re: FP by rpstrong · · Score: 1

    This is quite false. If your pedal drops to the floor, it means that there is either a hydraulic leak or air in the line. If the system isn't so compromised, then it will continue to work with the engine either on or off - the only difference being the additional pressure required. (If you don't expect the extra pressure, you could easily crash simply because you thought you were already maxing out the brakes.)

    Also. the loss of power assistance will typically take several applications, with the pedal effort steadily increasing. (Source: every car I've owned with power brakes. I live in the mountains, and I routinely practice power off coasting, to see how the vehicle handles without power brakes OR power steering.)

  95. English by Anonymous Coward · · Score: 0

    "Tesla's already issues a software update that owners can download to path the security flaw."

    Tesla already issueD or Tesla already offers. And patCh the security flaw.

  96. Re:Tesla's OTA and The Obvious by Anonymous Coward · · Score: 0

    Mechanics CAN'T work on Tesla cars.

    I would say that today's mechanics SHOULDN'T work on Tesla cars.

    Today's competent mechanics are trained to work on today's cars. They normally focus on the combusion, ignition, lubrication and exhast systems. None of those exists in a Tesla. Getting a general mechanic to repair a Tesla is like getting a plumber to rewire you house.

    Maybe in a decade when electic drive trains are common, mechanics will be trained to work on them, it will be a different story.

  97. Skin in the game means little by sjbe · · Score: 1

    If I turn my steering wheel the wrong way, or if I run a stop sign, or even if I'm driving drunk - If i plow into your trusting kester, I might just kill myself as well. I have a really really good reason not to do any of that stuff because I have skin in that game. So that's nota reall good argument except in the case of a suicidal driver.

    The fact that you have skin in the game means little. There are over 30,000 deaths each year in the US in automobiles and I assure you that most of them are far from suicidal.

    The idea that you trust your ignition key to start the car is just silly.

    Really? Ask GM whether we should worry about about trusting our lives to ignition switches.

    1. Re:Skin in the game means little by Ol+Olsoc · · Score: 1

      If I turn my steering wheel the wrong way, or if I run a stop sign, or even if I'm driving drunk - If i plow into your trusting kester, I might just kill myself as well. I have a really really good reason not to do any of that stuff because I have skin in that game. So that's nota reall good argument except in the case of a suicidal driver.

      The fact that you have skin in the game means little. There are over 30,000 deaths each year in the US in automobiles and I assure you that most of them are far from suicidal.

      The idea that you trust your ignition key to start the car is just silly.

      Really? Ask GM whether we should worry about about trusting our lives to ignition switches.

      I keep re-reading this, and have a little trouble parsing it all.

      Let me end it with this, and if you want to comment more, go ahead.

      The concept of opening your transportation device up to some person on the web who may or may not want to kill you, or bribe you, is only smart for some odd metrics of smart - as in smart for the people who might get some convenience, or profit.

      The good? Imagine yourself having some oddball car problem. One of those things that never shows up when you take it to the garage - really hard to find. Push a "problem report button, and everything that is instrumented is measured, and a report instantaneously sent off to the manufacturer.

      Engine car analysis at the garage won't even require a physical connection. Just cue up the VIN of the car, and the garage's wireless system will find your car in the bay, analyze it, and make a printout so the mechanic can fix it.

      That kind of stuff sounds tremendous to me.

      Oh, but those downsides.

      As your car becomes part of the internet of things, it also pick up the problems.

      We already see some of the Chevy products advertising 3 little urchins in a Chevy, enjoying their three separate streaming videos on their three separate tablets. So now we're looking at paying for an internet connection to the car. Viola, the connection.

      This being the internet we know and love, we'll get advertisments. Maybe an automobile version of Punch the monkey on your "command screen.

      And of course, your GPS will allow incredibly easy tracking of your movements.

      And now the fun part - Cryptolocker for cars. Pay us, or we scramble da car. Or even reset your system down to the key level, or just lock the doors and reformat your auto's system. Any possible intrusion upon your normal computer will now be available for your car.

      I mean, it's not like we aren't seeing the beginning of this already. The BMW ease of robbery hack, the Jeep hack, and now this. I'll bet there are more we don't know about.

      It's just not being done from some miscreant's house in the woods yet - but the groundwork is there. Just because it can be done doesn't mean it should be done.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  98. Re:"Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    For most cars, nothing particularly noticeable happens. (From the driver's perspective, anyway... the ECU should disengage the transmission before powering down.)

    For the remaining vehicles, take the 1/2 second to pop it into neutral before killing the engine.

    How hard is this?

  99. Re:"Emergency Parking Brake"Re: FP by beastofburdon · · Score: 1

    Says the dumbass who does not realize that it is a separate system which does not use the hydraulic calipers.

  100. Re:"Emergency Parking Brake"Re: FP by beastofburdon · · Score: 1

    You truly are a dumbass. It is an emergency brake for use when the hydraulic breaks fail. If you ever take a look at it it is wire operated and works a separate set of brakes on the rear wheels which are drum brakes. Somehow I doubt you have ever worked on a car beyond checking the oil, if that.

  101. Re: "Emergency Parking Brake"Re: FP by Anonymous Coward · · Score: 0

    When you have worked on as many cars as me you can educate me that it pulls a cable that pulls the break mechanism. Also when you have taken as many tight 90 degree corners as me, then you can educate me what is what. It is a hand brake because it is operated with the hand. It does no matter if you use it during parking, yes, you should use it, or if you use it in emergency where it is damn useful if you have to drift your car

  102. Re: "Emergency Parking Brake"Re: FP by beastofburdon · · Score: 1

    Something tells me you have never done either. Primarily your complete lack of knowledge pertaining to brakes.