Slashdot Mirror
FBI Warns That Car Hacking Is a Real Risk (wired.com)
An anonymous reader writes: The FBI and the U.S. National Highway Traffic Safety Administration are voicing their concerns about the potential risk of cars being hacked. In an advisory note, they urge the public to be aware of cyber-security threats revolving around connected vehicles. From the advisory, "Modern motor vehicles often include new connected vehicle technologies that aim to provide benefits such as added safety features, improved fuel economy, and greater overall convenience. Aftermarket devices are also providing consumers with new features to monitor the status of their vehicles. However, with this increased connectivity, it is important that consumers and manufacturers maintain awareness of potential cyber security threats." They are also advising drivers and manufacturers to ensure the vehicle software is up-to-date, and keeping an eye out for recalls.
Is anyone compiling a list of new cars you can get without this crap in them?
The FBI is warning the public that it should take steps to protect itself from people breaking into computers? Isn't it in a legal battle with Apple because Apply is taking steps to protect consumers from people breaking into computers?
The FBI can't complain about security flaws while taking Apple to court to mandate broken security. It is disturbing that they can't see how broken their logic is.
From now on I'm only buying cars built in the 20th century.
The Moore-Murphy Law: The number of things that will go wrong will double every 2 years.
...is to backdoor those bitches!
Your friendly neighbourhood FBI agent.
Yeah, and next week the FBI will say they need to be able to remotely control/track our vehicles to be able to catch terrorists -> criminals -> tax evaders -> jaywalkers -> politically inconvenient people. It will be totally secure though, because only the FBI/Government will be able to do it, and it's completely legal because of 16th century English common law and they have secret court rulings we can't read to back them up.
Did you really need the FBI telling you this to know it's a problem?
Go away!
That's what Volkswagen is trying to tell everyone, their cars emission control software has been hacked!!!
You say that like you're trying to make an Onion-style joke headline, but -- like the Onion often is -- it turns out to be more valid than you think.
However, I'd say the bigger threat in that case is copyright law and DRM, rather than the FBI.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
promoted in the spirit of safety (which is laudable in an era of distracted driving, etc)... but, did anybody else see this as a way to mandate that law enforcement had a means of remotely/electronically disabling your vehicle?
http://www.usatoday.com/story/money/cars/2016/03/17/automatic-emergency-braking-coming-all-cars-2022/81907516/
The FBI would like to have the keycodes to open every car in America. It stands to reason that terrorists are using cars to get around their bombing/gunfight missions. To screen for potential terrorists, the FBI will now use the All Writs Act to force all car manufacturers to give the FBI the key to every car sold.
Entia non sunt multiplicanda praeter necessitatem.
Back in 2012 or 2013 I was really annoyed when Verizon started blocking access to my favourite IRC servers, and they never did give me a satisfactory answer for why they were doing it. So I switched to Sprint. Within the past few months Sprint also started blocking IRC and it didn't make sense until I read the linked FBI announcement just now.
"Before the researchers report was released, the cellular carrier for the affected vehicles blocked access to one specific port (TCP 6667) for the private IP addresses used to communicate with vehicles"
6667, the default IRC port. Those carriers seem to have blocked port 6667 completely.
The only thing that can protect you from a bad guy with backdoor access to your secured system is a good guy with backdoor access.
...would probably disagree with you, if his car didn't accelerate out of control and explode against a tree. CANBUS manipulation is also an option.
Hey I know you are trying patch the security holes in your product but please, just for us (wink wink), add a security hole for us to get in...
Dear FBI,
No shit.
Signed,
Everyone in the universe who's been paying attention
Just cruising through this digital world at 33 1/3 rpm...
Wasn't this in the news over a year ago. I though by now everyone knew this... I guess not the US Gov...much like the fact that you can do things... good and sometimes bad with computers.. this must be a recent and frighting revelation for them.
Do any of the three letter organizations really want secure systems? Or just ones that look secure but really have enough holes so that they can monitor the use?
The whole reason a hacker can remotely disable your engine is because police asked for that capability and now hackers have it.
This is what happens when someone thinks it's a good idea to have real time connections of the internal workings of your Vehicles and appliances on the internet. How long has windows been out and they are still finding security flaws? How long has Linux and Unix been around, same thing? This OS's have been around for decades and we still have monthly patches on them. I kinda like older tech for my vehicles. I like carburetors and points and distributors, why because they are Simon simple and you can fix them in a rain storm on the side of the road unlike if you had some sensor go out somewhere in your car and you had to trace it back. Simple, tried and true is usually better than modern and convenient. Because when your life depends on something, that is the day it fails or gets hacked into. I can hack into someone's car and I can turn off their brakes and speed up their engine. You can even shift their transmission fort them. You can kill someone remotely with these vehicles. Nice to know...
Paul E. Bahre