Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hackers Remotely Cut a Corvette's Brakes

Posted by Soulskill on from the has-no-effect-on-corvette-drivers dept.

An anonymous reader writes: Security researchers presented work at the USENIX conference today showing an easy way to hack into a car's electronics using a small gadget that plugs into modern dashboards. The port they're taking advantage of is commonly used to monitor the location and speeds of these vehicles. Once the researchers' dongle is attached, they can use SMS messages to transmit commands to the car's internal network. They demonstrated this by remotely cutting a Corvette's brakes. "Though the researchers say their Corvette brake tricks only worked at low speeds due to limitations in the automated computer functions of the vehicle, they say they could have easily adapted their attack for practically any other modern vehicle and hijacked other critical components like locks, steering or transmission, too."

5 of 161 comments (clear)

  1. Misleading Attention Grabbers by monkeyxpress · · Score: 4, Informative

    This is silly. The brake pedal on every car that currently leaves a production line is still physically connected to the master cylinder and wheel callipers. What they likely meant by 'disabled the brakes' is that they disabled the ABS or brake assist module. While troubling, these components are all designed with mechanical overrides for if the electronics goes hey-wire, so this is really scare mongering.

    We have known for years about CAN bus insecurity and how you can control indicators and wipers once you get physical access. There was even a model of car where you could just snap a wing mirror off and plug directly into the CAN system through the exposed mirror connector. These people haven't done anything new and are just being intentionally sensationalist to get attention.

    1. Re:Misleading Attention Grabbers by 0123456 · · Score: 4, Informative

      You realize that ABS cuts the brakes, right? So, if you can take over the ABS controller, you can stop the car from braking?

      There's no way in hell a device attached to the bus connector under the steering wheel should be allowed to do such a thing.

    2. Re:Misleading Attention Grabbers by StefanSavage · · Score: 4, Informative

      Sorry, I have contrary empirical evidence. On multiple different cars we have manipulated appropriate ECUs with the effect that you can push on the brake pedal with no impact on forward velocity (see autosec.org and also the paper this post refers to). I'll personally attest that it is so and that no matter how hard you step on the pedal that nothing is happening wrt braking. I believe that Charlie and Chris also accomplished the same thing with the vehicles they addressed in the first and most recent presentations.

  2. Re:We are rapidly getting to a point where it's... by ArhcAngel · · Score: 3, Informative

    Oh, there are people doing it they just have the law on their side.

    --
    "A person is smart. People are dumb, panicky dangerous animals and you know it." - K
  3. More Bullshit "hacking" by Lumpy · · Score: 3, Informative

    Can we stop with these fake "researchers" that make claims that are stupid as hell?

    They did not hack anything, they compromised the car by having physical access and sent service code activation commands.

    Basically if there is a smelly guy wearing a trenchcoat under your dash, you might be hacked.

    --
    Do not look at laser with remaining good eye.