Slashdot Mirror
Why Car Info Tech Is So Thoroughly At Risk
Cory Doctorow reflects in a post at Boing Boing on the many ways in which modern cars' security infrastructure is a white-hot mess. And as to the reasons why, this seems to be the heart of the matter, and it applies to much more than cars: [M]anufacturers often view bugs that aren't publicly understood as unimportant, because it costs something to patch those bugs, and nothing to ignore them, even if those bugs are exploited by bad guys, because the bad guys are going to do everything they can to keep the exploit secret so they can milk it for as long as possible, meaning that even if your car is crashed (or bank account is drained) by someone exploiting a bug that the manufacturer has been informed about, you may never know about it. There is a sociopathic economic rationality to silencing researchers who come forward with bugs.
Someone in the car industry needs to stand up and say "There will be no networked computers in my vehicles."
-- Thou hast strayed far from the path of the Avatar.
Disagree. Proprietary software is just as buggy and sometimes extremely buggy. There may even be NDA agreements that forbid revealing any bugs to third parties.
> You should read the articles. Because CAN is a multi-master communications
> bus any device on the bus has write access at the hardware level - it's only
> software controls that limit whether a device can write to the bus or not. Which
> is why the government-mandated ODBC-II interface is such a bad idea,
> because anyone can plug in to the CAN bus with a standardized connector
> and get complete control of a vehicle.
Why is so much unnecessary, security-risky, stuff connected to that device? In a worst case, have separate buses...
* the "entertainment" bus for wifi for "teh interweb", streaming audio, etc.
* the "critical" bus that controls car operation. Have it only *PHYSICALLY* accessable, i.e. only via physically plugging a probe into a jack. And none of the devices connected to the "critical" bus are radio/wifi/bluetooth/whatever-else externally accessable.
I'm not repeating myself
I'm an X window user; I'm an ex-Windows user
even regulatory capture is better than no regulation. the big guys corrupting the government and writing rules that help them, is still better than no rules at all, where the big guys simply crush smaller guys and consumers any fucking way they want: no regulation, remember?
plenty of countries handle regulation with far less corruption than us. that's what we should aim for. but asking for less regulation, is far worse, on any measure you can think of. you should be asking for regulations to be cleaned up
it's like the bad guys robbed the bank by paying off the guard
and your solution is:
1. fire the guard. no guard. hey, that will work to prevent bank robberies (!?)
2. forget the bad guys, don't even go after them or punish them
just let them get away with robbing you and not even mentioning them as the fucking cause of your problem. all you do is whine "the problem is we have guards who can be corrupted, you can never get rid of that problem..." hello? what about the assholes doing the corrupting and robbing you? do you have anything to say about their behavior?
what you should do is:
1. fire the guard. hire a new guard. evaluate him better and more regularly
2. go after the bad guys. punish them. make them pay. they fucking robbed you asshole
why do corporations escape scrutiny when they corrupt our government and so many morons can only criticize the government?
what the hell is up with that?
FIX the government. if you WEAKEN the government, the bad guys who are the actual cause of your fucking problem laugh all the way to the bank: you made their job easier, and rewarded them for fucking up the only thing you have to protect yourself, your fucking government
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
NDAs in proprietary software is there for a reason - to protect the software vendor against revelations that they have done wrong, all the way from copyright infringement (like breaking an open source license condition in their solution), backdoors, security shortcuts etc. If it possibly can exist it will exist in the closed code.
As being involved in the car industry - I can agree upon the observation. Just look at the Autosar platform, it's a collection of bugs in tight formation that has been sold to the car industry as the greatest solution since the invention of the stone axe. But for everyone that have been working with internet solutions it's revealed to be a very clunky solution that doesn't really improve things, it just adds overhead.
Today the car industry starts to look at Ethernet as a replacement for CAN, but then there are complaints about it causing a higher power consumption and therefore there's a "need" to do quirky solutions like separating traffic on VLANs on the same physical bus, and that separation into VLANs is enough to offer sufficient security against intrusions and overload attacks (intentional through malware or unintentional through bugs).
In addition to this it's worth to realize that when you buy a car you only buy the hardware, you aren't permitted to know anything about the software. So essentially the manufacturer could say that you can keep the car but we have to erase the software in it - leaving you with a 2 ton shell of steel and plastics.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.