Slashdot Mirror
Unpatchable 'Flaw' Affects Most of Today's Modern Cars (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: A flaw buried deep in the hearts of all modern cars allows an attacker with local or even remote access to a vehicle to shut down various components, including safety systems such as airbags, brakes, parking sensors, and others. The vulnerability affects the CAN (Controller Area Network) protocol that's deployed in modern cars and used to manage communications between a vehicle's internal components. The flaw was discovered by a collaborative effort of Politecnico di Milano, Linklayer Labs, and Trend Micro's Forward-looking Threat Research (FTR) team. Researchers say this flaw is not a vulnerability in the classic meaning of the word. This is because the flaw is more of a CAN standard design choice that makes it unpatchable.
There is another approach. CAN traffic happens over a differential pair. I have a specially-constructed device that can jam CAN traffic. I call it a "paperclip." I bend it and plug it into both data lines on the OBD port and the network is dead.
We need to ban these dangerous hacking paperclips.
"-1 Troll" is the apparently the same as "-1 I disagree with you."
I can hack your brakes With à wire Cutter. No Laptops required.
Just like this server is totally unsecure all I have to do is swap the hard drive and motherboard and I have root access.
Okay I make the airbag fail too buy yanking it out of the dash board, who cares.
The person whose airbag you just yanked out of their dashboard?