How Hackers Gain Access to Cars

[shiny!]

Long article, well worth the read. Here are some excerpts:

Hacks on the Highway
Automakers rush to add wireless features, leaving our cars open to hackers

... Among the most vivid examples came this week, when security researchers Charlie Miller and Chris Valasek demonstrated that they could briefly hijack a vehicle over the Internet, without any dealership-installed device to ease access. By hacking into a 2014 Jeep Cherokee, the researchers were able to turn the steering wheel, briefly disable the brakes and shut down the engine.

The drive-by hack

Cars sold today are computers on wheels, with dozens of embedded chips running millions of lines of code. These vehicles can talk to the outside world through remote key systems, satellite radios, telematic control units, Bluetooth connections, dashboard Internet links and even wireless tire-pressure monitors. Security experts call these systems “attack surfaces,” meaning places where intrusions can start.

Once inside, most computer systems on modern vehicles are somehow connected, if only indirectly. Researchers who have hacked their way into computers that control dashboard displays, lighting systems or air bags have found their way to ones running transmission systems, engine cylinders and, in the most advanced cars, steering controls. Nearly all of these systems speak a common digital language, a computer protocol created in the 1980s when only motorists and their mechanics had access to critical vehicle controls.

The overall security on these automotive systems is “15 years, maybe 20 years behind where [computer] operating system security is today. It’s abysmal,” said researcher Peiter Zatko, who once directed cybersecurity research for the Pentagon’s Defense Advanced Research Projects Agency (DARPA) and now is developing an independent software security research group.

Attackers don’t need to crash cars to cause trouble. A jealous, malicious hacker could use a vehicle’s navigation system to track his spouse’s movements while remotely activating the built-in microphone to secretly record conversations that happen in the car. Thieves are already using mysterious “black boxes” that, through the radio signals that control modern entry systems, unlock cars as the crooks walk by; some simply climb in, start the engine and drive away.

The next wave of attacks, researchers say, could include malicious software delivered over the Internet to disable your car’s engine, with the sender offering to revive your vehicle for a few hundred dollars. Or the new generation of wireless links between cars and their surroundings — designed to improve traffic flow and avert crashes — could enable drive-by hacks. Imagine a single infected WiFi beacon on a stretch of highway delivering a virus to every passing vehicle. More...

Another reason to love my Crown Vic. It's just nice, safe, reliable transportation with no aspirations to be a mobile office or home entertainment system. What a concept!

[flintlock]

Re: How Hackers Gain Access to Cars

I have been holding off buying a new vehicle because I love the relative simplicity of older ones. I can fix most things on my 2003 truck. Just so much more to break on the newer ones, much of which can only be serviced by the dealer. Less choice means astronomical repair bills. I tend to buy and hold onto vehicles, but for those who trade up every few years they could probably care less. I don't really see the need to integrate wireless accessibility into cars. Can't most useful features just be accomplished through the smart phone link? I think manufacturers may be looking for more ways to tie you to using the dealer only for service and repair. This technology is one way they can do that.

[thriftyandboringinohio]

Re: How Hackers Gain Access to Cars

Passive Keyless Entry Systems are very popular on newer cars. Mine has one.
When I get close to my car with the key fob in my pocket, the doors unlock, I can get in and start it with a start button and never take my keys out of my pocket.

Of course the key fob and car exchange a digital code so I can only start my own car.
And the system is very accurate at measuring signal strength so my car opens and starts only when I am very close or inside the car.

And that is the obvious vulnerability.
If a thief gets a low-noise radio signal amplifier, for as little as $20, she can open the car and drive it away.

The keys laying on my kitchen counter are still transmitting and receiving, and so is the car parked in the driveway.
But the signal is far too weak at both ends and the car knows it, and won't open and start.

That little radio amplifier changes everything.
Both the car and the key fob get a nice strong signal from the amplifier.
The car thinks the key is beside the car, and the thief can get in, start the car and drive away.

A decent radio tech as a thief does not even need an amplifier.
She can use a length of coax cable with a good antenna on each end, placing one end near the car and the other against the kitchen wall.
The setup moves the signal well enough that she can steal the car.

They call this a "relay attack", because the thief uses hardware to relay the signal between the key and the car.
Here's a technical paper with details and test results. It also gives counter measures.
I expect millions of us will soon get new key fobs with a new UNLOCK button we need to press as we approach the car.

https://eprint.iacr.org/2010/332.pdf

[shiny!]

Re: How Hackers Gain Access to Cars

I expect millions of us will soon get new key fobs with a new UNLOCK button we need to press as we approach the car.

https://eprint.iacr.org/2010/332.pdf

This is what I had with my 2012 Accent. I pressed a button on the keyfob to lock and unlock my car. The problem was that too often, the Unlock button would get pressed in my purse or pocket without my knowing so. I often came out to my car to find the doors unlocked. Sometimes I was close enough to the car to hear the horn honk when it happened, but it happened too many times without my knowing.

Even though the old-fashioned mechanical key for my CV is a little less convenient, it can't unlock the doors by accident.

[gwynedd1]

Re: How Hackers Gain Access to Cars

What one might call Progress, I call progressively. I am so long gone they left me at hand cranked windows. Is there something wrong with me to reject unreliable gadgetry, marginally better in the most meaningless of ways over a failsafe and refined device? Even worse are those powered seat adjusters. What could possibly be more useless? How about an electric cup holder on a surf board, a mini-fridge on a dirt bike, or a folding ironing board on a hang-glider?

[thriftyandboringinohio]

Re: How Hackers Gain Access to Cars

What one might call Progress, I call progressively. I am so long gone they left me at hand cranked windows. Is there something wrong with me to reject unreliable gadgetry, marginally better in the most meaningless of ways over a failsafe and refined device? Even worse are those powered seat adjusters. What could possibly be more useless? How about an electric cup holder on a surf board, a mini-fridge on a dirt bike, or a folding ironing board on a hang-glider?

Too true. Much of what we call progress exchanges one annoyance for another.
In this case, the big advantage is that I no longer need to touch the key fob button that unlocks the door.
In exchange my car is easy to steal.

[don]

Re: How Hackers Gain Access to Cars

feeding the maw of consumption

[don]

Re: How Hackers Gain Access to Cars

WASHINGTON — Fiat Chrysler on Friday issued a sweeping recall of 1.4 million vehicles to fix a software flaw that could allow hackers to remotely gain control of the vehicle, including cutting off the engine and brakes, and even the steering.

The vulnerability was revealed this week by two technology researcherswho demonstrated how they successfully hacked a Jeep Cherokee through Chrysler’s Uconnect entertainment and connectivity system. The hackers were able to take control of the Jeep’s systems while sitting miles away in a St. Louis basement.

The researchers alerted the automaker before making their findings public, and Fiat Chrysler released a software patch that customers could download or have installed at a dealer. But the National Highway Traffic Safety Administration said it felt the problem required a formal recall, which the automaker has agreed to undertake.

“Launching a recall is the right step to protect Fiat Chrysler’s customers, and it sets an important precedent for how N.H.T.S.A. and the industry will respond to cybersecurity vulnerabilities,” Mark R. Rosekind,the agency’s administrator,said in a statement on Friday.

Mr. Rosekind also said that the agency was opening an investigation into the matter to “better assess the effectiveness of the remedy proposed by Fiat Chrysler.”

The company will send affected owners a USB drive they can plug into their vehicles to install a software update. Owners can also download the update directly onto their own portable drive. Additionally, Fiat Chrysler said it had “applied network-level security measures” on the cellular network that communicates with its vehicles as another step to block the vulnerability.

The company said it was unaware of any injuries, complaints, warranty claims or accidents associated with the hacking vulnerability, aside from the two researchers’ own demonstrations.

The recall affects certain vehicles equipped with 8.4-inch touch screens from the 2013 model year onward, the company said. That includes some Jeep Cherokees and Grand Cherokees, Dodge Durangos, Ram pickup trucks, Chrysler 200 and 300 sedans, Dodge Chargers and Vipers.

[DSpencer]

Re: How Hackers Gain Access to Cars

Too true. Much of what we call progress exchanges one annoyance for another.
In this case, the big advantage is that I no longer need to touch the key fob button that unlocks the door.
In exchange my car is easy to steal.

Everything I have read says that the exact opposite is true. Newer cars with higher tech security are much harder to steal. Thieves are stealing fewer cars and still prefer to steal old cars today even though they aren't worth as much.

https://www.bostonglobe.com/business...IZJ/story.html

http://www.nytimes.com/2014/08/12/up...abt=0002&abg=1

https://www.esurance.com/info/car/myth-thieves-are-more-likely-to-steal-new-cars

It makes perfect sense to me. What is easier: using a Slim Jim to open a door and hotwiring the car or figuring out how to bypass the engine immobilizers security code?

Now, that isn't to say that the tradeoffs are worth it for convenience and entertainment features which cost more and are less reliable. And certainly there is no way to hack into an old car and take over the controls. But overall technology seems to have increased security and safety.

[santafe2]

Re: How Hackers Gain Access to Cars

I expect millions of us will soon get new key fobs with a new UNLOCK button we need to press as we approach the car.

That's interesting TBO. Might explain why my Volt requires no interaction, (very convenient), but my Porsche requires me to press a button on the key fob to enter the car and requires that the key fob be inserted into the dash to start the car.

[lektrode]

Re: How Hackers Gain Access to Cars

.... What is easier: using a Slim Jim to open a door and hotwiring the car or figuring out how to bypass the engine immobilizers security code?

Now, that isn't to say that the tradeoffs are worth it for convenience and entertainment features which cost more and are less reliable. And certainly there is no way to hack into an old car and take over the controls. But overall technology seems to have increased security and safety.

whats 'easier' ?
a quick window smash with an autobody dent puller, and using it to rip out the ignition/keyswitch = GONE in 60 secs or less...

or hey!
'borrowing' a tow truck and simply hookin up and driving away

you'd never convince me that all these new convenience and entertainment features make cars more 'worth it'
all they really do is make em that much more difficult/costly to repair, which then forces their buyers to replace them more frequently - something i suspect is part of the 'marketing strategy'

[DSpencer]

Re: How Hackers Gain Access to Cars

whats 'easier' ?
a quick window smash with an autobody dent puller, and using it to rip out the ignition/keyswitch = GONE in 60 secs or less...

or hey!
'borrowing' a tow truck and simply hookin up and driving away

you'd never convince me that all these new convenience and entertainment features make cars more 'worth it'
all they really do is make em that much more difficult/costly to repair, which then forces their buyers to replace them more frequently - something i suspect is part of the 'marketing strategy'

Getting access to the interior is never really an issue. My understanding is that in a modern car with an engine immobilizer you can't simply rip out the ignition/keyswitch and start the car. Nothing's foolproof but the statistics suggest that they are highly effective at preventing theft.

Of course using a tow truck is possible, but there are many reasons why it's not a great option.

Some features are excessive, but I used to have an old Jeep Cherokee with roll down windows. It was certainly frustrating to have to pull over to the side of the road if you want to roll your windows down (or up if it starts raining...)

[shiny!]

Re: How Hackers Gain Access to Cars

Getting access to the interior is never really an issue. My understanding is that in a modern car with an engine immobilizer you can't simply rip out the ignition/keyswitch and start the car. Nothing's foolproof but the statistics suggest that they are highly effective at preventing theft.

Of course using a tow truck is possible, but there are many reasons why it's not a great option.

Some features are excessive, but I used to have an old Jeep Cherokee with roll down windows. It was certainly frustrating to have to pull over to the side of the road if you want to roll your windows down (or up if it starts raining...)

Rain? What's that?

[Milton Kuo]

Re: How Hackers Gain Access to Cars

Getting access to the interior is never really an issue. My understanding is that in a modern car with an engine immobilizer you can't simply rip out the ignition/keyswitch and start the car. Nothing's foolproof but the statistics suggest that they are highly effective at preventing theft.

Of course using a tow truck is possible, but there are many reasons why it's not a great option.

Some features are excessive, but I used to have an old Jeep Cherokee with roll down windows. It was certainly frustrating to have to pull over to the side of the road if you want to roll your windows down (or up if it starts raining...)

Use of slim jims, smashing windows, and hotwiring are things are done in the perpetration of crimes of opportunity. These are done by stupid hooligans and it's easy to know a crime is being committed just by watching them. Almost no legitimate owner is going to be doing those things to use his car.

However, to skilled criminals, these cars with flaky computer systems are a gold mine. It is relatively easy to develop devices that can allow a thief to walk up to car and use the device to unlock the door and start the engine. It is difficult to know whether a crime is being committed because the thief's mode of stealing a car looks no different than that of the car's legitimate owner. The car can then be driven to a garage that is a Faraday cage where it can be chopped up for parts.

Something the article mentions but does not emphasize yet is quite concerning: the messaging system used in the cars' computer systems is not authenticated. That means any command given to the computer is executed. The computers do not verify that commands are being issued by a trusted source.

It is utter insanity to not secure the controls of a remote system against malicious attack or even message corruption caused by noise. The military and NASA have used authenticated messaging for decades in their rockets and satellites.

[DSpencer]

Re: How Hackers Gain Access to Cars

Use of slim jims, smashing windows, and hotwiring are things are done in the perpetration of crimes of opportunity. These are done by stupid hooligans and it's easy to know a crime is being committed just by watching them. Almost no legitimate owner is going to be doing those things to use his car.

However, to skilled criminals, these cars with flaky computer systems are a gold mine. It is relatively easy to develop devices that can allow a thief to walk up to car and use the device to unlock the door and start the engine. It is difficult to know whether a crime is being committed because the thief's mode of stealing a car looks no different than that of the car's legitimate owner. The car can then be driven to a garage that is a Faraday cage where it can be chopped up for parts.

Something the article mentions but does not emphasize yet is quite concerning: the messaging system used in the cars' computer systems is not authenticated. That means any command given to the computer is executed. The computers do not verify that commands are being issued by a trusted source.

It is utter insanity to not secure the controls of a remote system against malicious attack or even message corruption caused by noise. The military and NASA have used authenticated messaging for decades in their rockets and satellites.

Well, the statistics speak for themselves. Newer cars with more technology are far less likely to be stolen. My educated guess is that stupid hooligans outnumber skilled criminals by an enormous margin. Besides, most of the smart criminals work in finance and politics.

I agree that they definitely need to improve their electronic security. Nonetheless, it's important to keep things in perspective. My wife drives a new Jeep Cherokee with all the bells and whistles that make it vulnerable to being hacked (basically they could have used her car in the story). It's scary to think that it's possible for someone to hack her car while she's driving. But what are the odds of her dying in a hacker attack vs the odds of the vehicle's collision avoidance system saving her from a potentially fatal crash?

The same kinds of arguments can be (and often are) made for all kinds of life saving technology. Airbags can kill you. Vaccines can have side effects. Surgery is dangerous. But you have to look at both the pros and cons to have an accurate picture of the net benefit.