PDA

View Full Version : I hacked a JEEP!



Cap
22nd July 2015, 06:58 AM
Just because you can, doesnt mean you should!

Well, some time ago there was a post of a new rangie with the ability to control it with a mob phone. I was seriously concerned about the safety factor, and not surprised here is an example of what can happen.

Wired shows how hackers control a Jeep (http://www.news.com.au/technology/drivers-urged-to-update-jeep-software-after-hackers-force-car-off-the-road/story-e6frfrnr-1227451777474)

I think I will just stick to my good old Disco 300tdi!

DiscoMick
22nd July 2015, 08:32 AM
Jeep advertising says its buyers have purchased an adventure, so it's certainly true!!

Lotz-A-Landies
22nd July 2015, 11:30 AM
Well not me but cyber security hackers did. :o

Cybersecurity researchers use the internet to hack into car, turn off engine as it drives - ABC News (Australian Broadcasting Corporation) (http://www.abc.net.au/news/2015-07-22/cybersecurity-researchers-hack-car-and-turn-off-engine/6638622)

NavyDiver
22nd July 2015, 11:45 AM
noted by 3 types of Jeeps are listed in forbes as three of the new cars to avoid!
15 New Cars To Avoid | Forbes (http://www3.forbes.com/business/15-new-cars-to-avoid/10/) then 15 New Cars To Avoid | Forbes (http://www3.forbes.com/business/15-new-cars-to-avoid/11/)
then 15 New Cars To Avoid | Forbes (http://www3.forbes.com/business/15-new-cars-to-avoid/12/)

Your link might add one more reason not to have one. :)

flagg
22nd July 2015, 02:29 PM
Just wait for C-ITS. Basically it is a network where all cars talk to each other.... So much to go wrong I can't even start to imagine....

Tombie
22nd July 2015, 03:22 PM
Just wait for C-ITS. Basically it is a network where all cars talk to each other.... So much to go wrong I can't even start to imagine....

Probably not much worse than the current interaction of random nodes (people)...

Even if the system crashed a few a day, would likely still be far less than the current crashes per day..

Don 130
22nd July 2015, 07:09 PM
And today they announce trials of driverless cars in Australia. Imagine the possibilities.
Don.

Sandgroper
22nd July 2015, 07:31 PM
What happened to the Robinsons!

vnx205
22nd July 2015, 07:55 PM
Why on earth does any car need to be connected to the internet?

NB. This is not the same as asking why do some people want their car to be connected to the internet?

Eevo
22nd July 2015, 08:06 PM
interesting story.

pretty hard hack imho.

and the fix is pretty easy, keep the two systems (internet & engine/body/trans) seperate.


for those wanting to know why they have internet:

Chrysler Uconnect Web is a system that can provide wireless Internet connectivity in any Chrysler, Dodge, or Jeep vehicle, via a wi-fi "hot-spot". The wifi hotspot range is approximately 150 feet from the vehicle in all directions. A 3G EV-DO cellular network from Autonet Mobile provides the Internet service, and the in-vehicle device provides an ordinary wifi network with Internet connectivity.

Uconnect also includes a Bluetooth network allowing voice activated calling on cell phones, a hard drive for media storage, a Sirius TV and satellite radio system, and a GPS system.

UConnect Access and UConnect Pages are both new services offered as of 2013 that include an in-car 3G cellular connection, with access to in-car apps, emergency assistance, and roadside assistance. The system is a fee-based service that includes a free trial with a newly purchased vehicle.

vnx205
22nd July 2015, 08:17 PM
That may be why they have it, but I didn't see anything in that list that anyone really needs. :)

Eevo
23rd July 2015, 05:59 AM
That may be why they have it, but I didn't see anything in that list that anyone really needs. :)

america, thats why.

so the kids in the back can watch youtube from their ipad

mikehzz
23rd July 2015, 06:33 AM
This is about the Internet of Things (http:// https://en.m.wikipedia.org/wiki/Internet_of_Things) isn't it? One more step towards the judgement day predicted by the Terminator movies. Just start thinking it, and it will be so....

Chucaro
23rd July 2015, 07:16 AM
Back in 2011 a study about this issue was done.
Comprehensive Experimental Analyses of Automotive Attack Surfaces

The document is available HERE (http://www.autosec.org/publications.html)

Considering how electronics in cars have developed in the last 4 years since the article there are big chances that not only Jeep and Fiat can be affected by this.

mikehzz
23rd July 2015, 07:44 AM
So car jackers will become car hackers? Something to look forward to....having your car pinched from your driveway by a fat pimply geek sitting in his bedroom in the Czech Republic. If the car starts coughing and spluttering, does that mean it has a virus? :)

Chucaro
23rd July 2015, 09:21 AM
So car jackers will become car hackers? Something to look forward to....having your car pinched from your driveway by a fat pimply geek sitting in his bedroom in the Czech Republic. If the car starts coughing and spluttering, does that mean it has a virus? :)

The potential purchaser working in an oil rig does not need any more contacting the owners of thew cars published in gum tree, he will get the car and sell it on line :D

NavyDiver
28th July 2015, 10:09 AM
Why on earth does any car need to be connected to the internet?

NB. This is not the same as asking why do some people want their car to be connected to the internet?


Several million cars might be internet connected soon:eek: And we are doing it:angel: SMA selling the link stuff to China :) "SmartTrans!enters!China logistics market!with contract!with Yanfeng Visteon
Automotive ? a!major!subsidiary!of!China's!largest!auto!manufac turer!"
(this Not a share recommendation)

https://content.markitcdn.com/research.commsec.com.au/Api/Document/B64ENCeyJkayI6IjE0MTAtMDE2NDQ0NTctNUc1VFA3UDlUTjFI QTVLUENMSFVCNDVKSkUiLCJmaWQiOm51bGwsImR0IjpudWxsfQ ==.pdf

DiscoMick
28th July 2015, 11:31 AM
That may be why they have it, but I didn't see anything in that list that anyone really needs. :)


How about GPS and Bluetooth mobile - not needed?

DiscoMick
28th July 2015, 12:43 PM
Jeep can't take a trick at the moment.


Fiat Chrysler faces record $105m fine | Bangkok Post: auto (http://www.bangkokpost.com/auto/news/636368/fiat-chrysler-faces-record-105m-fine)

vnx205
28th July 2015, 01:07 PM
How about GPS and Bluetooth mobile - not needed?

No need to be connected to the internet to have a GPS.

I have one in my Defender, which has no internet access.

I use one in my kayak and it certainly isn't connected to the internet. :)

No, don't need Bluetooth. :)

Eevo
28th July 2015, 01:42 PM
No need to be connected to the internet to have a GPS.


but to get the latest info on traffic, delays, etc, you need internet

NavyDiver
28th July 2015, 01:59 PM
Like it or not were are going to be fully wired in (wirelessly) in the next generation of cars. Like your car keys, internet banking passwords and even humble internet forum passwords security is the key. In 1990 it would have been impossible to guess the technology changes in 2010. The rate of change is getting even faster as new ways of using even our cars evolves think Uber now, Teslar or our mobile phones, GPS, ipads (yuck:wasntme:)

Security is evolving but as always the weak link is usually us. Jeep was caught by two smart people. Oddly I dont think it is as easy as they think to secure a Jeep as its technology is not well designed and patch work fixes are just that- patchy

A 3d printer anyone?

mikehzz
28th July 2015, 02:02 PM
but to get the latest info on traffic, delays, etc, you need internet

Are you sure about that? I thought it was sent like this....


Using the thousands of sensors already installed by road and traffic authorities across the major Australian cities (placed at intersections), this raw unprocessed data is transmitted back to the SUNA control centre, where it is then re-processed using SUNA's own unique data algorithms.

It is then sent to your GPS, using a silently encoded FM signal that piggybacks on the 106.5FM band (don't worry; you'll still be able to listen to Richard Mercer's love song dedications while using the service).

vnx205
28th July 2015, 02:08 PM
but to get the latest info on traffic, delays, etc, you need internet

Traffic?

Delays?

Oh! you mean like the other day when I had to wait for two cars to go past before I could turn at the intersection at the end of my street. :)

It must have been peak hour. [bigrolf]

bee utey
28th July 2015, 02:22 PM
How new Jeeps resemble series Land Rovers...

Is your firewall properly installed and free of big holes? :misclock:

Eevo
28th July 2015, 02:45 PM
Are you sure about that? I thought it was sent like this....

google traffic works too, lol