Watch remote hackers easily take control of this Jeep and more

guest · Sep 23, 2020

Exclusive: New push for autonomous vehicles bill
September 23, 2020
https://www.axios.com/new-push-for-...ill-4f77892d-bcbe-4e74-a725-1b8ce9b9b46b.html

In a renewed push to get an autonomous vehicles bill through Congress, Rep. Bob Latta (R-Ohio) is reintroducing the SELF Drive Act Wednesday, Latta told Axios.
The big picture: New policy legislation is a long shot in the short Congressional calendar leading up to Election Day. But Latta's effort shows the importance many lawmakers put on promoting a U.S. lead in the development of self-driving vehicles.
"We've got to keep moving on it for safety's sake."
Click to expand...

The SELF Drive Act is a federal framework for autonomous vehicle regulation in the U.S., requiring cybersecurity provisions for AV manufacturers, exempting certain national safety standards to get cars to market quicker and pre-empting states from passing safety laws regarding AVs.

Flashback: After the SELF Drive Act first passed the House in 2017, objections in the Senate over certain provisions doomed the effort to create a federal regulatory framework for autonomous vehicles.
[...] Congress has been talking about passing AV legislation for more than two years but hasn't been able to get it done.
Click to expand...

xxJackxx · Sep 23, 2020

...exempting certain national safety standards to get cars to market quicker and pre-empting states from passing safety laws regarding AVs...
Click to expand...

Am I reading this wrong or are they saying they are compromising safety to get this stuff on the road sooner?

guest · Sep 28, 2020

mood said: ↑

Exclusive: New push for autonomous vehicles bill September 23, 2020
Click to expand...

Federal Autonomous Vehicle Bill Includes Detailed Privacy, Cybersecurity Requirements
September 28, 2020
https://www.jdsupra.com/legalnews/federal-autonomous-vehicle-bill-45330/

U.S Rep. Bob Latta (R-Ohio), ranking member of the House Energy and Commerce Subcommittee on Communications and Technology. has re-introduced the "Safely Ensuring Lives Future Deployment and Research In Vehicle Evolution Act’’ or the ‘‘SELF DRIVE Act’’ to regulate autonomous vehicles. Key provisions relating to data protection include: [...]
Cybersecurity Plan
Vehicle manufacturers are required to develop a cybersecurity plan that includes:

• A written cybersecurity policy with respect to the practices of the manufacturer for detecting and responding to cyberattacks, unauthorized intrusions and false and spurious messages or vehicle control commands including: [...]
Click to expand...

More about exemptions (and more) in the pdf-file:
"SELF DRIVE Act" (PDF): https://republicans-energycommerce.house.gov/wp-content/uploads/2020/09/2020.09.23-SELF-DRIVE.pdf

BoerenkoolMetWorst · Sep 29, 2020

xxJackxx said: ↑

Am I reading this wrong or are they saying they are compromising safety to get this stuff on the road sooner?
Click to expand...

Exactly what I am reading. They want to beat China at all costs..

guest · Oct 12, 2020

mood said: ↑

Autonomous vehicle sensors tricked by "invisible" drone projections of road signs
August 2, 2019
https://www.scmagazineuk.com/autono...-drone-projections-road-signs/article/1592846
Click to expand...

Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot
Researchers found they could stop a Tesla by flashing a few frames of a stop sign
October 11, 2020
https://www.wired.com/story/tesla-model-x-autopilot-phantom-images/

Safety concerns over automated driver-assistance systems like Tesla's usually focus on what the car can't see, like the white side of a truck that one Tesla confused with a bright sky in 2016, leading to the death of a driver. But one group of researchers has been focused on what autonomous driving systems might see that a human driver doesn't—including "phantom" objects and signs that aren't really there, which could wreak havoc on the road.

Researchers at Israel's Ben Gurion University of the Negev have spent the last two years experimenting with those "phantom" images to trick semi-autonomous driving systems.
In new research, they've found they can pull off the same trick with just a few frames of a road sign injected on a billboard's video.
Click to expand...

guest · Nov 13, 2020

Consumer Watchdog Hacks A Tesla to Prove Dangers of Wirelessly Connected Cars
Releases “Hack 10” Report About Hackability Of Top 10 Best Selling Cars
November 13, 2020
https://www.consumerwatchdog.org/pr...tesla-prove-dangers-wirelessly-connected-cars

The nonprofit, nonpartisan Consumer Watchdog today released a video showing how a box it built with the help of technologists could hack into the wireless connection of a Tesla and take over the screen with a “This Tesla’s Been Hacked” message.

The group said the demonstration showed how vulnerable the wireless connection in the cars is– by amplifying the signal it could work on many vehicles simultaneously, a large scale hack. Once in control of the screen, a hacker could suggest malware be downloaded, potentially giving them access to the car's operation and control over the vehicle, or otherwise sabotage the car.
Consumer Watchdog released the video in conjunction with its new report, “Connected Car Report 2020: The Models Most Open To Hacks,” in which it reviews the “Hack 10” of top selling cars.
Click to expand...

Consumer Watchdog: Connected Car Report 2020: The Models Most Open To Hacks

“Connected Car Report 2020: The Models Most Open To Hacks," finds all of Car and Driver’s top 10 best-selling cars for 2020 clearly have features that allow wireless connectivity with safety critical systems and no known way to disconnect those systems. This leaves the vehicles vulnerable to an unprecedented, large-scale hack.

To prepare the report, Consumer Watchdog reviewed technical specifications and surveyed dozens of sales departments and service technicians at major car manufacturers. The group demonstrated a hack of a Tesla and found Tesla was the “The Most Hackable Car.”
Click to expand...

guest · Nov 23, 2020

This Bluetooth Attack Can Steal a Tesla Model X in Minutes
The company is rolling out a patch today for the vulnerabilities
November 23, 2020
https://www.wired.com/story/tesla-model-x-hack-bluetooth/

Tesla has always prided itself on its so-called over-the-air updates, pushing out new code automatically to fix bugs and add features. But one security researcher has shown how vulnerabilities in the Tesla Model X's keyless entry system allow a different sort of update: A hacker could rewrite the firmware of a key fob via Bluetooth connection, lift an unlock code from the fob, and use it to steal a Model X in just a matter of minutes.

Lennert Wouters, a security researcher at Belgian university KU Leuven, today revealed a collection of security vulnerabilities he found in both Tesla Model X cars and their keyless entry fobs
[...] In just 90 seconds, the hardware can extract a radio code that unlocks the owner's Model X. Once the car thief is inside, a second, distinct vulnerability Wouters found would allow the thief to pair their own key fob with the victim's vehicle after a minute's work and drive the car away.

"Basically a combination of two vulnerabilities allows a hacker to steal a Model X in a few minutes time," says Wouters, who plans to present his findings at the Real World Crypto conference in January. "When you combine them, you get a much more powerful attack."
Click to expand...

guest · Dec 1, 2020

mood said: ↑

Tesla is seeking $167 million in damages from the former employee Elon Musk accused of sabotage
December 11, 2018
https://www.cnbc.com/2018/12/11/tes...in-damages-from-ex-employee-martin-tripp.html
Click to expand...

Ex-Tesla Factory Worker to Pay $400,000 Over Feud With Musk
December 1, 2020
https://www.bloomberg.com/news/arti...y-worker-to-pay-400-000-to-end-feud-with-musk

A former Tesla Inc. employee who locked horns with Chief Executive Officer Elon Musk has agreed to pay the company $400,000 for telling reporters about production delays at its Gigafactory in Nevada, according to a court filing.

The payment is part of a proposed settlement of a lawsuit Tesla filed in 2018 that accused Martin Tripp of illegally divulging trade secrets about the production of Tesla’s Model 3.
As part of the accord, Tripp admitted to violating trade secret laws and confidentiality agreements. He also owes Tesla an additional $25,000 for previously revealing information about the company, despite being ordered to stop by a judge.
Click to expand...

hawki · Mar 23, 2021

"Panasonic teams with McAfee to stop car hacking

Panasonic said Tuesday it will partner with U.S. antivirus software developer McAfee to monitor vehicles for signs of cyberattacks.

The partners will build a vehicle security operation center, with plans to start the monitoring service around 2024...

When a threat is detected, the operation center will retrieve data from the compromised vehicle, analyze it and deliver the results to the automaker.

The manufacturer can use the data to take such steps as shutting down onboard systems or releasing software security updates..."

https://asia.nikkei.com/Business/Technology/Panasonic-teams-with-McAfee-to-stop-car-hacking

guest · May 1, 2021

Tesla cars can be remotely hacked using drone, WIFI dongle
April 30, 2021
https://www.hackread.com/tesla-cars-remotely-hacked-with-drone/

Wi-Fi-based hacking could be an issue of concern with automobiles we had never even thought about it. But two security researchers, Kunnamon, Inc.’s Ralf-Philipp Weinmann and Comsecuris GmbH’s Benedikt Schmotzle claim that it is possible.

The researchers have discovered remote zero-click security flaws in the open-source software component, called ConnMan, used in Tesla cars. The exploits are dubbed TBONE.
This means a hacker can perform all those functions remotely that a driver can while sitting in the car. However, the hacker cannot yield the car’s drive control.
Click to expand...

When the researchers checked the vulnerabilities themselves, they were able to unlock Tesla Model X’s doors with a remote hack using a DJI Mavic 2 drone carrying a WIFI dongle. This required no interaction from anyone in the vehicle.
Are Other Automobiles Vulnerable?
According to researchers, yes, other automobile brands are also vulnerable because researchers claim that nearly half of the auto industry uses ConnMan. The affected components are widely used in infotainment systems of internet-connected cars.
Click to expand...

BoerenkoolMetWorst · May 1, 2021

@mods maybe this thread can be renamed to reflect the fact that it is about digital security of cars in general, not just about Jeep.

hawki · Oct 17, 2022

"Police in Europe Arrest Car Theft Gang That Tried to Hack Thousands of Vehicles...

A criminal group in Europe may have been trying to hack tens of thousands of vehicles with keyless entry systems in an effort to steal them.

Police in France, Spain, and Latvia dismantled the criminal group, which resulted in the arrests of 31 suspects, according(Opens in a new window) to Europol...

'A fraudulent tool—marketed as an automotive diagnostic solution, was used to replace the original software of the vehicles, allowing the doors to be opened and the ignition to be started without the actual key fob,' Europol said...

There’s also evidence that the hacking occurred on a relatively wide scale. During the investigation, French police seized several servers from the criminal group that had'“recorded over 53,000 connections'..."

https://www.pcmag.com/news/police-in-europe-arrest-car-theft-gang-that-tried-to-hack-thousands-of

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

guest Guest

xxJackxx Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

hawki Registered Member

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

guest Guest

xxJackxx Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

hawki Registered Member

Useful Searches