Watch remote hackers easily take control of this Jeep and more

ronjor · Jun 19, 2018

Tesla employee sabotage illustrates critical importance of user permissions

By Conner Forrest June 19, 2018, 6:31 AM PST
What happened at Tesla is a worst-case scenario for many CEOs and CISOs alike. Not only have company secrets been leaked, but the core OS code could have been compromised in unknown ways. This, of course, begs the question of why this particular individual had these permissions to begin with..
Click to expand...

ronjor · Jun 20, 2018

Tesla sues former employee for allegedly stealing gigabytes of data, making false claims to media

Robert Ferris @RobertoFerris
Tesla is suing former process engineer Martin Tripp for allegedly illegally exporting data and making false claims to reporters.
The suit alleges he took his action in retaliation for being reassigned after he allegedly had job performance problems and was combative and disruptive toward fellow employees.
Click to expand...

ronjor · Jun 20, 2018

Car Connectivity Consortium Announces Publication of the Digital Key Release 1.0 Specification, Delivering to the Industry a Standardized Smartphone as a Car Key Solution

Beaverton, OR, – June 20, 2018 – The Car Connectivity Consortium (CCC), an organization focused on enabling seamless mobile device-to-vehicle connectivity, today announced the publication of the Digital Key Release 1.0 specification. Available to all CCC member companies, this first standardized solution enables drivers to download the digital key onto their smart devices and use it for any vehicle.
Click to expand...

guest · Jun 21, 2018

Tesla's mobile app can turn on top speed limits from anywhere
You can adjust it anywhere from 50 to 90 MPH.
June 21, 2018
https://www.engadget.com/2018/06/21/tesla-speed-limit-mode/

If you're a little worried about handing over the keys to your Tesla to a valet, then you might be tempted to engage the car's "Valet Mode," which limits the speed of the car to 70MPH and tops out the power and acceleration to just 25 percent.
Now, however, Tesla's latest software update will now let you adjust the top speed of your car with a specific speed limiter feature, and directly from your mobile app.

According to the update, this speed limiter feature will let you "limit vehicle speed and acceleration with speed limit mode" and that the maximum vehicle speed can be set between 50 to 90 mph.

The software update for the speed limiter mode is rolling out starting today, and will gradually be available to the whole fleet.
Click to expand...

guest · Jun 22, 2018

ERM completes vehicle anti-ransomware solution
June 21, 2018
http://en.globes.co.il/en/article-erm-to-launch-vehicle-anti-ransomware-solution-1001242519

Israel-based international automotive technology provider ERM Advanced Telematics has completed development of an integrated hardware-software product that protects vehicles against ransomware and other cyberattacks. The solution, called eCyber, is suited for both OEMs and the aftermarket.

The eCyber, is installed between the vehicle's external communications device and the vehicle’s CAN Bus (Controller Area Network Bus). The eCyber performs as a secure gateway for outside communications to the CAN Bus, allowing only communications with predefined and known parameters and values to go through.

[...] according to the Irdeto Global Connected Car Survey, published in late 2017, consumers' concern about the cyber security of connected cars is liable to discourage them from buying one. 85% of respondents said that they believe that a connected car is liable to be a target for a cyber-attack.
Click to expand...

ronjor · Jun 23, 2018

ronjor said: ↑

Tesla sues former employee for allegedly stealing gigabytes of data, making false claims to media
Click to expand...

Tesla Breach: Malicious Insider Revenge or Whistleblowing?

By Kevin Townsend on June 22, 2018
But according to a report published today by the BBC, Tripp "says he’s a whistleblower being smeared for speaking out about standards and safety at the company, and deserves protection."
Click to expand...

guest · Jun 28, 2018

ronjor said: ↑

Tesla sues former employee for allegedly stealing gigabytes of data, making false claims to media
Click to expand...

Tesla to Apple, Google, Microsoft: Don't delete files in trade-secrets lawsuit
Court also grants Tesla's request to order Facebook, WhatsApp, Open Whisper, and Dropbox to save documents in its suit against a former employee.
June 28, 2018
https://www.zdnet.com/article/tesla...t-dont-delete-files-in-trade-secrets-lawsuit/

Tesla has asked a court to subpoena several big tech firms to preserve documents that a former employee allegedly leaked via email, cloud storage accounts, and messaging apps.

Ars Technica reports, the electric-vehicle maker on Wednesday was granted approval to serve the same style of subpoena on AT&T, Facebook, WhatsApp, Open Whisper, and Dropbox.

Tesla also asked for each of the tech companies to preserve files Tripp has deleted already, which it argues he had done "in an effort to cover his tracks and spoliate evidence of his wrongdoing".
Click to expand...

guest · Jul 12, 2018

Experts say car key fob hacks could become the latest theft tool for cyber-savvy car thieves
July 11, 2018
https://abcnews.go.com/Politics/experts-car-key-fob-hacks-latest-theft-tool/story?id=56487440

The threat is called a 'relay attack,' Michael Tanji, chief operating officer for the cybersecurity firm Senrio Inc., told ABC News. Basically, the attackers grab the signal being transmitted by a nearby key fob using a special receiver. That receiver then 'relays' that signal to the car, allowing the thief to unlock it and even start the ignition.

While the potential is there to hack into someone’s car, NICB said in a statement to ABC News that they have no confirmed cases anywhere in the U.S. of a vehicle theft using this device.

Cybersecurity experts like GlobalSecurityIQ CEO Holly Hubert said that relay attack threats were first detected in 2016 after remotes became increasingly prevalent in cars.
"Cybersecurity is a dynamic, ever-changing issue,” Hubert told ABC News.
Click to expand...

ronjor · Jul 25, 2018

Automotive companies are warming up to vulnerability disclosure programs

Sean Lyngaas Jul 25, 2018
The automotive industry is looking to step up its collaboration with cybersecurity researchers to identify software and hardware bugs in order to better protect vehicles which are becoming more connected and automated.
Click to expand...

guest · Aug 2, 2018

ronjor said: ↑

Tesla sues former employee for allegedly stealing gigabytes of data, making false claims to media
Click to expand...

Fired Tesla employee files defamation lawsuit against the company
August 01, 2018
https://www.techspot.com/news/75770...files-defamation-lawsuit-against-company.html

At any rate, Tripp's lawsuit against Tesla seeks a whopping $1 million in damages and is based on his belief that CEO Elon Musk defamed him in recent statements.

Naturally, legal assistance for a lawsuit against one of the most prominent EV makers around doesn't come cheap. As such, Tripp has set up a GoFundMe campaign, seeking $500,000 to cover his legal bill. So far, the fundraising effort has earned Tripp roughly $16,000 in donations.

It's tough to say who is in the right here, and it will likely be some time before a judge answers that question for us.
Click to expand...

guest · Aug 9, 2018

Can Self Driving Cars Be Secured? Car Hacking Duo Isn’t Sure
August 09, 2018
https://securityledger.com/2018/08/can-self-driving-cars-be-secured-hacking-duo-isnt-sure/

Three years after putting the automotive industry on notice with their remote compromise of a Jeep Cherokee, Charlie Miller and Chris Valasek said that securing consumer owned vehicles is a much harder problem than securing corporate owned fleets of vehicles like those operated by GM’s Cruise Automation and Uber.

[...] autonomous vehicles are like “data centers on four wheels” when looked at through the lens of information security. They present mostly known challenges, many of which can be solved with existing tools and technologies.
Car makers need to reduce the attack surface of vehicles by removing unnecessary or redundant features and limiting – if not eliminating – inbound connections.

Still, the two said that securing self driving cars isn’t impossible – especially if car makers are careful not to lock in security features, but to allow their vehicles to be flexible and capable of adapting to both software and hardware changes over time.
“You can’t lock in security,” said Miller. “This needs to be iterative and flexible.”
Click to expand...

guest · Aug 11, 2018

Tesla will open its security code to other car manufacturers
Musk sees it as vital to protecting self-driving cars.
August 11, 2018
https://www.engadget.com/2018/08/11/tesla-to-open-source-car-security-code/

Tesla might just get into the habit of releasing source code for its in-car tech. Elon Musk has signaled his intention to post the source code for Tesla's car security software, letting any automaker roll it into their own machines.

If rival brands adopt Tesla's approach, it could set an unofficial standard for connected car security that would look good from a marketing standpoint.

The code could provide a boost to connected car security if and when it arrives.
Click to expand...

ronjor · Aug 21, 2018

Connected car data handover headache: There's no quick fix... and it's NOT just Land Rovers

By John Leyden 21 Aug 2018
Who has the keys to your car?
Click to expand...

guest · Sep 6, 2018

Tesla Restores Cars When Hacking Goes Wrong
September 6, 2018
https://www.bleepingcomputer.com/news/security/tesla-restores-cars-when-hacking-goes-wrong/

Well-known for its security-aware attitude, the company is now spelling it out to security researchers that they can hack Tesla cars without fear of ending up with a non-running automobile, of voiding the warranty, or of legal liability.
Rules of engagement
There are some conditions, though. Both the security expert and the vehicle must be registered and approved for carrying security tests as part of the company's vulnerability reporting program, and the effort must be in good faith.

If these requirements are met, Tesla will offer over-the-air (OTA) assistance to researchers that need their research-registered car to be updated.
Acts like FCAA and DMCA have no sway
All researchers and cars that have been approved in the vulnerability report program are safe from any legal charges under the Computer Fraud and Abuse Act (CFAA).

As for the Digital Millenium Copyright Act (DMCA), Tesla won't bring copyright infringement claims against pre-approved researchers that circumvent the car's security mechanism, if they do not access any other code or binaries.
Click to expand...

guest · Sep 6, 2018

Man uses smart phone app to steal Tesla from Mall of America
September 05, 2018
http://www.fox9.com/news/man-uses-smart-phone-app-to-steal-tesla-from-mall-of-america

An alleged car thief can be seen arriving at the Mall of America on surveillance footage only minutes before using technology to steal a Tesla.

“I don’t think it’s that easy,” said John Marino, the owner of Trevls, a Tesla rental company. “I think this guy had a next level of information on how to do it."

Police say the man somehow manipulated the Tesla app to unlock and start the car, disabling the GPS before leaving town. While the alleged thief may have been crafty, he couldn’t escape Tesla’s constant data collection. Every time he plugged into charge, they immediately knew his location. [...] “The amount of data Tesla collects is actually kind of creepy."

“What it sounds like this person may have done is convince Tesla to take the VIN number of that vehicle and add it to his Tesla account,” Lanterman explained. “By doing that, you can do that with a phone call. By doing that, you can now control the Tesla from an app on your phone."
Click to expand...

guest · Sep 10, 2018

Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob
September 10, 2018
https://www.wired.com/story/hackers-steal-tesla-model-s-seconds-key-fob/

A team of researchers at the KU Leuven university in Belgium on Monday plan to present a paper [...] revealing a technique for defeating the encryption used in the wireless key fobs of Tesla's Model S luxury sedans

Just two weeks ago, Tesla rolled out new antitheft features for the Model S that include the ability to set a PIN code that someone must enter on the dashboard display to drive the car. [...]
But if owners of a Model S manufactured before then don't turn on that PIN—or don't pay to replace their key fob with the more strongly encrypted version—the researchers say they're still vulnerable to their key-cloning method.
Keys to the Kingdom
Like most automotive keyless entry systems, Tesla Model S key fobs send an encrypted code, based on a secret cryptographic key [...]
The researchers found that once they gained two codes from any given key fob, they could simply try every possible cryptographic key until they found the one that unlocked the car.

That whole attack chain, the researchers say, is possible thanks to the Pektron key fob system's relatively weak encryption. "It was a very foolish decision," says KU Leuven researcher Tomer Ashur. "Someone screwed up. Epically."
Click to expand...

ronjor · Sep 26, 2018

Researchers See Improvements in Vehicle Cybersecurity

By Eduard Kovacs on September 26, 2018
Data from vulnerability assessments conducted by security consulting firm IOActive in the past years shows some improvements in vehicle cybersecurity.
Click to expand...

ronjor · Oct 22, 2018

Thieves steal a Tesla Model S by intercepting the entry fob signal

By Cal Jeffrey
Took them longer to find the button to release the charger than to open the doors
Click to expand...

Same old stuff.

ronjor · Oct 24, 2018

IT and the rise of connected cars

By Matthew Harper
Volkswagen recently revealed that it is exploring using an innovative form of distributed-ledger (i.e., blockchain) technology called the IOTA "Tangle" to deliver software updates to its autonomous cars. The technology may be available to customers as early as Spring 2019. It’s just the latest in a seemingly unending stream of news about connected cars, a broad term that encompasses everything from cars with built-in GPS systems to fully autonomous, AI-driven semi trucks in the emergent IoT space.
Click to expand...

Minimalist · Oct 31, 2018

Connected Cars Get More Hardware Security

Both Infineon and STMicroelectronics have added capability to enable secure microcontrollers and secure over-the-air (OTA) updates for connected cars.

Infineon Technologies has developed a hardware-based security module that protects communications between connected cars and car manufacturers with its new OPTIGA TPM 2.0, a trusted platform module (TPM) in which manufacturers can incorporate sensitive security keys for assigning access rights, authentication, and data encryption in the car in a protected way.

Meanwhile, STMicroelectronics has launched a new flagship SPC58 H line of Chorus automotive MCUs, designed to protect connected-car functionalities and allow OTA updates to be applied safely with its hardware security module (HSM) capable of asymmetric cryptography and fully EVITA-compliant for attack prevention, detection, and containment techniques.
Click to expand...

https://www.eetimes.com/document.asp?doc_id=1333919

ronjor · Nov 6, 2018

Securing Connected Cars: How to Create a Cost-Effective, Secure In-Vehicle Network Backbone

By Marie Hattar on November 06, 2018
The U.S. Department of Transportation recently announced that the latest round of autonomous driving regulations will be released this summer. Dubbed AV 3.0, the new policy will set federal guidelines for how autonomous and assisted driving solutions need to work on public roads. A big part of making autonomous driving accessible will be the ability for car makers and suppliers to secure the networks that power these increasingly sophisticated vehicles. In fact, that’s what cars today have become: highly-sophisticated mobile computer networks that just happen to travel at highway speeds.
Click to expand...

guest · Nov 19, 2018

ronjor said: ↑

Thieves steal a Tesla Model S by intercepting the entry fob signal
Same old stuff.
Click to expand...

Stealing a Tesla just got harder thanks to a new update
Turning off mobile access, which lets owners track their EV's location, now requires a password
November 19, 2018
https://www.engadget.com/2018/11/19/tesla-update-anti-theft-summon/

As Electrek points out, US owners and police were able to track the vehicles and catch the guilty parties. In Europe, however, the thieves were sophisticated enough to deactivate mobile access, but with the latest update, you need a code to do that.
As such, crooks won't be able to easily disable tracking and will need to quickly get out of GPS range before they're discovered.

The problem can be avoided altogether by deactivating passive entry mode, particularly when your car is outside or in a public spot. Lots of owners have been demanding the extra layer of security for mobile access mode, however, so this could curtail some thefts.
Click to expand...

ronjor · Dec 5, 2018

Toyota Builds Open-Source Car-Hacking Tool

Kelly Jackson Higgins 12/5/2018

'PASTA' testing platform specs will be shared via open-source.

BLACK HAT EUROPE 2018 – London – A Toyota security researcher on his flight from Japan here to London carried on-board a portable steel attaché case that houses the carmaker's new vehicle cybersecurity testing tool.
Click to expand...

guest · Dec 11, 2018

ronjor said: ↑

Tesla sues former employee for allegedly stealing gigabytes of data, making false claims to media
Click to expand...

Tesla is seeking $167 million in damages from the former employee Elon Musk accused of sabotage
December 11, 2018
https://www.cnbc.com/2018/12/11/tes...in-damages-from-ex-employee-martin-tripp.html

Tesla is seeking more than $167 million in a lawsuit against former employee Martin Tripp, recent legal filings revealed.

An interim case management report published on Nov. 27 reveals that Tripp's attorneys aim to depose Tesla CEO Elon Musk and more than 10 people involved with the company.

Tripp attorney Robert D. Mitchell said in an e-mail to CNBC: "The purported damage amount claimed by Tesla relates to supposed dips in Tesla's stock price by virtue of the information Mr. Tripp provided to the press last summer." He characterized the damage claims as "absurd."
Click to expand...

guest · Dec 17, 2018

Your High-Tech Car Is a Magnet for Hacking
December 17, 2018
https://www.bloomberg.com/news/articles/2018-12-17/your-high-tech-car-is-a-magnet-for-hacking

Connected cars are forecast to double to 775 million by 2023, according to Juniper Research, enlarging the pool of convenience features like keyless entry, apps to turn on heating remotely and smartphone connection via bluetooth.

In the race to thwart cybercriminals, carmakers regularly invite software experts to test the robustness of their setups. While phantom rides are relatively harmless, hacks can be far more dangerous.
“Criminals will keep trying new ways to get what they want and we need to constantly respond to their evolving techniques. Fighting fraud never ends.”
Click to expand...

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Watch remote hackers easily take control of this Jeep and more

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches