Slashdot Mirror


Dutch Researchers Show Connected Cars Can Be Cheaply Tracked (ieee.org)

schwit1 writes to point out an experiment undertaken on the campus of the Netherlands' University of Twente, in which two wireless sensing stations were able to cheaply pinpoint a target vehicle equipped with "smart" V2X systems nearly half the time, and track it (albeit less precisely) even more, according to Jonathan Petit, Principal Scientist at software security company Security Innovation. "You can build a real-time tracking system using off-the-shelf devices with minimum sophistication," says Petit. In a paper to be presented at the Black Hat Europe security conference in November, he describes being able to place a security vehicle within either the residential or the business zones of the campus with 78 percent accuracy, and even locate it on individual roads 40 percent of the time. The tracking here was accomplished by listening for transmissions emitted over using 802.11p at 5.9 GHz. Says the article: Petit is now working with Ford, GM, and other carmakers to develop strategies to help secure connected cars. One interesting finding from his experiment was that a Manhattan-style grid of roads makes it difficult for potential attackers because there are more connections between the intersections. "This raises the idea of privacy-enhancing road networks, where cities are designed with the concept of privacy at their core," he says.

25 comments

  1. the Uncertainty Principle by turkeydance · · Score: 1

    and you can guess the rest.

  2. Privacy-enhancing road networks by Michael+Woodhams · · Score: 4, Interesting

    New privacy violating technologies come along every few years. Road network layouts last centuries. It would be very foolish to let privacy-attack-of-the-day heavily influence your road layouts.

    --
    Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
    1. Re:Privacy-enhancing road networks by Anonymous Coward · · Score: 0

      "half the time"
      How is something that works 50% of the time useful?

      First glance I read "Dutch researchers show connected cars can be easily hacked" x.X

  3. Tracking Cops? by Anonymous Coward · · Score: 0

    Seems like police cars are loaded with networked tech nowadays. Has anyone put together a tool, maybe a raspberry with a software defined radio dongle, to detect the presence of police vehicles in the near vicinity?

    At the least, if you snooped the traffic of cellphones that congregate at the local station you could come up with a list of IEMI numbers and look for those being broadcast nearby. Although that's a lot more effort than just knowing what frequencies and protocols they use for their in-car electronics.

    1. Re:Tracking Cops? by viperidaenz · · Score: 1

      The cellphone traffic is also encrypted, so good luck coming up with a list of IMEI numbers.

      The list of frequencies used is public information, like every radio spectrum license.

    2. Re:Tracking Cops? by PPH · · Score: 2

      detect the presence of police vehicles in the near vicinity

      Detect clouds of powdered sugar?

      --
      Have gnu, will travel.
    3. Re:Tracking Cops? by KGIII · · Score: 1

      We used to have a 'sacrifice' driver when we left the bar. Someone, sober, would often stumble out to the road, fumble for his keys, and then weave down the road. When the cops followed him, we took off. It's a bit low-tech but it worked rather well.

      --
      "So long and thanks for all the fish."
    4. Re:Tracking Cops? by Anonymous Coward · · Score: 0

      Yeah forget about IMEI, that is not transmitted very often anyway, only at tower hand-off.

      Instead go with a long-range bluetooth detector. All modern phones have bluetooth and most people, including cops, are going to leave it enabled.

      Here's a bluetooth dongle that claims 2km omnidirectional range, probably more like 200m in real life, but that's still pretty good.
      http://www.aircable.net/produc...

    5. Re:Tracking Cops? by Anonymous Coward · · Score: 0

      Yes, don't let the sober guy drive you home. Use him so you can all drink and drive. Brilliant!

    6. Re:Tracking Cops? by jrumney · · Score: 1

      No, because tracking two cars on a univerity campus is a completely different scale of problem than tracking hundreds of vehicles among 10's of thousands across a whole city. Two raspberry pi's equipped with SDR dongles are not going to be effective - you will have more luck, and get access to far more data more reliably by hacking the infrastructure than trying this type of theoretical hack with homemade devices.

    7. Re:Tracking Cops? by davester666 · · Score: 1

      You don't snoop traffic at local stations...you go to the local donut shop.

      Here in Edmonton, one of the radio stations ran a contest, where you would phone in, then they would tell you the address of a Tim Hortons, you guess if there are cops there, they phone and ask, and you win if you guess right. Everyone would guess yes, most of the time they were right, and then the station got the hint that they shouldn't be running the contest anymore.

      --
      Sleep your way to a whiter smile...date a dentist!
    8. Re:Tracking Cops? by jewens · · Score: 1

      No by detecting the presence of polyester fibers used in police uniforms. As in the FuzzBuster from the Cannonball Run movies.

      --
      That group of bovine standing over there appears quite portentous. That's right it's an ominous cow herd.
    9. Re:Tracking Cops? by Nidi62 · · Score: 1

      Yes, don't let the sober guy drive you home. Use him so you can all drink and drive. Brilliant!

      Obviously they were already drunk when they came up with the plan.

      --
      The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
    10. Re:Tracking Cops? by KGIII · · Score: 1

      You are wise in the way of drunk thinking. We wouldn't have all fit in his car! Ah, man... Those were the days. Heh, I no longer drink. Thankfully.

      --
      "So long and thanks for all the fish."
  4. Tracking: The raison d'etre of V2V by WaffleMonster · · Score: 1

    You don't need fancy communications networks to do any of the "driver safety" things V2V koolaid drinkers are talking about. They are already being done better and cheaper today in production vehicles with sensors that never have to rely on other vehicles or things equipped with working transmitters.

    Technology has already been leap-frogged and made redundant by advances in computing/CV.

    "V2X" is now just a massive waste of time and money to enrich industry and serve as yet another ridiculous excuse to eviscerate any remaining rights of individuals not to be stalked en-masse by governments, corporations and individuals. This is nothing more than a solution in search of a problem.

    1. Re:Tracking: The raison d'etre of V2V by GuB-42 · · Score: 1

      What you say about driver safety could also be said about surveillance : why use V2X when you have cameras and computing/CV?
      Sensors and communications can work together, both for safety and for surveillance.

    2. Re:Tracking: The raison d'etre of V2V by WaffleMonster · · Score: 1

      What you say about driver safety could also be said about surveillance : why use V2X when you have cameras and computing/CV? Sensors and communications can work together, both for safety and for surveillance.

      The only communication worth a damn WRT vehicle safety is what actually occurs in the real world. In-vehicle RF transmission is an unnecessary liability in that compelling use cases simply don't exist. It can all be done with sensors that don't depend on the actions of others for proper operation.

      For surveillance RF can be passively monitored from great distances with little cost or effort. Yes you can do the same with magnetometers, optical sensors and constellations of spy satellites in low earth orbit. For that matter you could pay people to stand on the corner and record license plate numbers of every car they observe going by. The difference is cost.

      It isn't just that RF has no use case and will be used to lower the cost of enmasse surveillance it is also a liability. There is simply no way in hell to secure it. People can't even be bothered to secure ADS-B or AIS which are absolutely trivial relative to V2V. A system of transmitters depending on trust relationships between hundreds of millions of vehicles operated by hundreds of millions of people with physical access whom you have no reason at all to trust sounds like a credible plan.. doesn't it? The concept itself is nonsensical.

    3. Re:Tracking: The raison d'etre of V2V by Anonymous Coward · · Score: 0

      Right... We did a V2V experiment in 2012 where we measured road friction in corners using the ABS sensors from production vehicles. That was V2V because we announced the maximum safe speed to cars in the neighborhood. CV won't notice that, and if you're driving too fast for the corner your own sensors will detect the danger only when you're actually on the slippery patch - too late.

    4. Re:Tracking: The raison d'etre of V2V by WaffleMonster · · Score: 1

      Right... We did a V2V experiment in 2012 where we measured road friction in corners using the ABS sensors from production vehicles. That was V2V because we announced the maximum safe speed to cars in the neighborhood.

      This is worthless in the real world because friction varies by vehicle and path.

      That was V2V because we announced the maximum safe speed to cars in the neighborhood. CV won't notice that, and if you're driving too fast for the corner your own sensors will detect the danger only when you're actually on the slippery patch - too late.

      Infrared sensors have been demonstrated to detect the presence of ice, snow and water on roadways.

  5. Most driver carry a beacon already by Overzeetop · · Score: 1

    Nearly everyone I know carries a personal beacon which broadcasts an uniquely identifiable signature every few seconds. I suppose this is for the people who took the batteries out of their phones before going to the tin foil hat store.

    --
    Is it just my observation, or are there way too many stupid people in the world?
    1. Re:Most driver carry a beacon already by Anonymous Coward · · Score: 0

      And blacked out their number plate so the numerous cameras couldn't read them (automatic number plate recognition is pretty trivial).
      And avoided toll roads requiring "smart" tags.
      And presumably applied some sort of disguise to their car just in case.
      And never got pulled over by the cops (despite the lack of legible plates).

  6. No way, really? by JustAnotherOldGuy · · Score: 1

    An internet-connected device can be tracked? Wow, who knew?

    Seriously, does this come as a surprise to anyone? It shouldn't.

    --
    Just cruising through this digital world at 33 1/3 rpm...
  7. Just like aircraft & ADS-B by shocking · · Score: 1

    Large commercial aircraft have to have a transponder that transmits (among other things) their height, bearing, speed and position. Each one has a unique identifier (ICAO24 hex code). All aircraft will be required to be equipped with these things after 2020. You can track them with a home mode aerial, a Raspberry Pi & a DVB-T dongle, using SDR. It's all broadcast in the clear (it has to be - the logistics of making sure everyone has keys for decryption would be a nightmare).

  8. Don't see the significance here... by Zeorge · · Score: 1

    “You can build a real-time tracking system using off-the-shelf devices with minimum sophistication,” says Petit.
    "However, there is nothing to stop anyone else from also tuning in to the messages using a wireless ‘sniffing station’."


    Yeah, we all pretty much knew this. Also, maybe the guy should try three stations instead of two, which is basically what people found out what worked best eons ago. Yawn.