Hackers take control of Jeep remotely and crash it

Tugela

Tugela

Well-known member
May 21, 2007
4,764
564
Seattle
Fascinating, but worrisome, article in the Daily Telegraph about how a couple hackers exploited a security flaw in Fiat/Chrysler's wireless system to take control of a Jeep Cherokee and hijack its systems.

But according to Miller and Valasek, the on-board Internet connection is a "super nice vulnerability" for hackers. All they have to do is work out the car’s IP address and know how to break into its systems and they can take control.

They claim that more than 470,000 cars made by Fiat Chrysler could be at risk of being attacked by similar means

To which I say "Good luck taking control of my GEMS computer, motherfuckers. If I still had my RRC you'd never stand a chance at cracking the ultrasecure defenses of 14CUX. And as for a Series III, forget about it completely."
 
Maximumwarp

Maximumwarp

Well-known member
Mar 22, 2015
836
26
Fairburn GA
Something about this sounds fishy. They disabled the brakes via the Uconnect? The Uconnect interacts with the BCM, but the brakes should still function even if the BCM completely shuts down. Maybe not the electric parking brake, but the normal, hydraulic assist brakes, yes. And I'm fairly certain the Uconnect doesn't have access to the car's higher systems. And they did this from 10 miles away? I have to have my Chryslers within 50 ft of my shop in order to connect to them, and that's using Chrysler's wireless diagnostic tools that plug into the ODB and broadcast a signal. I don't think the car has anything capable of sending or receiving a signal from that far, aside from the RF reciever for the keyless entry/remote start.
 
az_max

az_max

1
Apr 22, 2005
7,463
2
Maximumwarp said:
Something about this sounds fishy. They disabled the brakes via the Uconnect? The Uconnect interacts with the BCM, but the brakes should still function even if the BCM completely shuts down. Maybe not the electric parking brake, but the normal, hydraulic assist brakes, yes. And I'm fairly certain the Uconnect doesn't have access to the car's higher systems. And they did this from 10 miles away? I have to have my Chryslers within 50 ft of my shop in order to connect to them, and that's using Chrysler's wireless diagnostic tools that plug into the ODB and broadcast a signal. I don't think the car has anything capable of sending or receiving a signal from that far, aside from the RF reciever for the keyless entry/remote start.
Click to expand...

their new systems integrate with the cellular card like many of the other MFR systems (On-star, Infiniti Connection, Ford mylink(?) ).

My question is why are key systems like engine control and ABS writable from remote systems? I'd expect audio, nav and other entertainment systems to have a writable partition to store info, and logging info for other systems for diag but hands off the ECU, ABS, Trans and steering systems.


Pretty soon there will be Mcafee and Norton AntiVirus for cars!


edit: original story
 
Maximumwarp

Maximumwarp

Well-known member
Mar 22, 2015
836
26
Fairburn GA
OnStar (GM) and BlueLink (Hyundai) are services that connect to the car remotely, but Uconnect isn't. It's purely infotainment, but it lets you change settings to the car that have to be run by the BCM, like how long the lights stay on after you lock it or if the headlights come on when you turn on the wipers. I don't believe it has access to anything more vital than that.
 
Maximumwarp

Maximumwarp

Well-known member
Mar 22, 2015
836
26
Fairburn GA
Nevermind, I just read the original story you posted, az_max. They got into the CAN bus, that would do it. Sounds like this is the fully-loaded model with the full-blown Uconnect, I guess it has some type of cell connection. Most of ours are the lesser version.
 
brian4d

brian4d

Well-known member
Dec 3, 2007
6,499
67
High Point, NC
This is a great example of - There's too much shit in cars these days...

My favorite years for used cars would be from about 93-2005
 
D

discostew

Well-known member
Sep 14, 2010
7,733
1,024
Northern Illinois
I think the easy fix is to make the internet connection have access to only the entertainment system. The problem with that is the entertainment system also has to be on the can or what ever networks the car runs. I think the game really changes with electric power steering . You would have no time to react to someone throwing your car into oncoming traffic at speed. I think it would be hard to disable the brakes totally.
 
kennith

kennith

Well-known member
Apr 22, 2004
10,891
172
North Carolina
discostew said:
I think the easy fix is to make the internet connection have access to only the entertainment system. The problem with that is the entertainment system also has to be on the can or what ever networks the car runs. I think the game really changes with electric power steering . You would have no time to react to someone throwing your car into oncoming traffic at speed. I think it would be hard to disable the brakes totally.
Click to expand...

Aftermarket receivers and computers can accomplish all of these new tricks with a power and ground wire.

Just isolate the infotainment and connectivity systems from the main vehicle user interface.

Problem solved.

Cheers,

Kennith
 
You must log in or register to reply here.
Top Bottom