Slashdot Mirror
Pwn2Own Contest Will Pay $900,000 For Hacks That Exploit Tesla's Model 3 (techcrunch.com)
The Model 3 will be entered into Pwn2Own this year, the first time a car has been included in the annual high-profile hacking contest. The prize for the winning security researchers: a Model 3. TechCrunch reports: Pwn2Own, which is in its 12th year and run by Trend Micro's Zero Day Initiative, is known as one of the industry's toughest hacking contests. ZDI has awarded more than $4 million over the lifetime of the program. Pwn2Own's spring vulnerability research competition, Pwn2Own Vancouver, will be held March 20 to 22 and will feature five categories, including web browsers, virtualization software, enterprise applications, server-side software and the new automotive category. The targets, chosen by ZDI, include software products from Apple, Google, Microsoft, Mozilla, Oracle and VMware. And, of course, Tesla . Pwn2Own is run in conjunction with the CanSec West conference. There will be "more than $900,000 worth of prizes available for attacks that subvert a variety of [the Model 3's] onboard systems," reports Ars Technica. "The biggest prize will be $250,000 for hacks that execute code on the car's getaway, autopilot, or VCSEC."
"A gateway is the central hub that interconnects the car's powertrain, chassis, and other components and processes the data they send. The autopilot is a driver assistant feature that helps control lane changing, parking, and other driving functions. Short for Vehicle Controller Secondary, VCSEC is responsible for security functions, including the alarm."
"A gateway is the central hub that interconnects the car's powertrain, chassis, and other components and processes the data they send. The autopilot is a driver assistant feature that helps control lane changing, parking, and other driving functions. Short for Vehicle Controller Secondary, VCSEC is responsible for security functions, including the alarm."
What if hackers took control of a Tesla and caused it to crash into a lane divider barrer? Or crash into a firetruck? It is better to find those exploits now, before they happen in real life.
Beeeeee Cause
It's ONE hole
TWO holes
THREE holes
No one's waitIIIIING...there's no waitiiiiiing
Could they be more racist?
1. AC's don't get them as a matter of course. /. has really gone downhill.
2. That's all I see so far anyway,
3. Sorry.
Get up!
Tesla needs to declare whether or not the vehicle will be running with all possible apps. You can run them and vehicles could be hacked as a result, so consumers need to be aware of how dangerous those apps could be and whether or not they should run any at all.
Chaos - everything, everywhere, everywhen
Second prize is two Tesla Model 3s.
I would have competed if I could have gotten an S...
Your ad here. Ask me how!
Because if they allow hacking with other vehicles it will be fun. My komatsu mining truck will hack a Tesla in no time
self driving cars need not network lock cars and not put the entertainment system network on the same network as the local CAN bus for sensors.
As for map data that can be done in a way there it is an one way input into the sensors system and can't over ride an sensor
Bad Map data can be used to place the car in place that is hard to get out of or may even send into a
RIVER
OFF AN CLIFF
ON TO AN AIRPORT RUNWAY
TRAIN TRACKS
WRONG WAY
[...] for hacks that execute code on the car's getaway, autopilot, or VCSEC.
I see a potential niche market for this car model.
Easy fix:
if(destination.isAllCaps())
return;
Give it to the community so that malware can be overidden. Malware being software that isn't under the owners control. When the company has more control over my car than I do, its a car I won't be driving.