6 ms·
> Lawshae says the attacks, which can open every door in a building, are possible because of a command injection vulnerability in a LED blinking lights service.
by dcposch 11y ago
> Lawshae says the attacks, which can open every door in a building, are possible because of a command injection vulnerability in a LED blinking lights service.
> "A command injection vulnerability exists in this function due to a lack of any sanitisation on the user-supplied input that is fed to the system() call," Lawshae says.
This looks like the latest in "internet of things" idiocy. Things that were once simple, but which now inexplicably run Linux.
This is how you get critical security failures from an "LED blinking lights service" or a home thermostat that bricks itself one morning after an auto update.
Its also how you get cars that can be crashed by a 4chan troll 1000 miles away, over the network, because of a bug in the entertainment system.
http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/ http://www.wired.com/2015/07/hackers-remotely-kill-jeep-high...
Just Say No to needless complexity. Just because you can give your fridge an IP address doesnt mean you should.
- golemotron 11y agoAgreed. After seeing cars rooted and controlled remotely I'd rather have a car with no software at all. It's time for a new Luddism.
- outworlder 11y agoYou'll have to get carburetors back to do so, though.
- bigiain 11y agoI just bought myself a motor cycle a week or two back which runs just fine with a completely dead battery (I need to roll start it, but its a 125cc two stroke so that's _super_ easy...). The indicators don't blink with the dead battery (they just sort of light up), and the headlights are very dim, but it ran just fine for ~450km like that last Sunday...
- GunboatDiplomat 11y agoWell, cars whose computers are not linked to a network.
- kbhn 11y agoAmong the many reasons why I drive stick, this ranks near the top. The clutch serves as a wonderful dead man's switch.
- passivepinetree 11y agoI'd be willing to bet a significant percentage of HN's readers drive stick.
- alanfalcon 11y agoFor the GP's reasons? I'd be curious what percentage here do drive stick. I never learned to drive manual. I'm ready to play on my iPhone while my Auto drives me to/from work daily.
- r00fus 11y agoExcept for those of us who drive hybrid eCVTs or electric. Owning an automatic was one of the most expensive decisions of my life... One I wouldn't repeat if I could avoid it.
- 13of40 11y ago> I'd be willing to bet a significant percentage of HN's readers drive stick. Is that because they have any technical comprehension of it or because they want everyone else to swoon?
- SixSigma 11y agoYour brakes are many times more powerful than your engine too.
- kdazzle 11y ago> This looks like the latest in "internet of things" idiocy. Things that were once simple, but which now inexplicably run Linux. I'm not sure that a different OS would necessarily prevent stupid errors like this one - the exploit would just be less obvious.
- PhasmaFelis 11y agoI think they're saying that it's silly to use any complete operating system for a task that could be entirely handled by a few kilobytes of embedded code running on an 8088.
- PhasmaFelis 11y agoAre there best practices for designing connected, secure-by-default embedded devices? If you want to give your fridge an IP address, I feel like there should be an easy way to do that without additional security worries.
- xiphias 11y agoThere is no easy way. There are ways to prove software correctness, but it is far from easy
- TeMPOraL 11y agoAnd because you can only prove software to be correct given some specific conditions, your provably correct system will eventually get pwned through a side channel anyway.
- PhasmaFelis 11y agoI guess I'm thinking that, for a simple hardware system with a handful of inputs and a handful of outputs, there's no need for it to be able to support a full command line, various ports and protocols, etc, etc. There should be a setup where it is completely closed off by default, and the developer enables a few specific I/O channels that only interact with the logic the dev programmed in. I may be oversimplifying things. Or maybe I've just reinvented old-fashioned embedded circuits, which still work fine but are out of fashion because devs want to work with their familiar tools.