3 ms·
So how do you make something secure when attackers have physical access for hours? I think cars cannot be perfectly secure like we expect computers to be purely
by dingo_bat 10y ago
So how do you make something secure when attackers have physical access for hours? I think cars cannot be perfectly secure like we expect computers to be purely because we don't leave our computers unattended for hours in public.
- Strom 10y agoFull physical access? It's hard, but seems an unrelated issue in regards to the linked post. The vulnerability here is that you can capture the key from air during transmission, without having physical access to the car or the key. We've had the technology to prevent this for a long time even before this system was designed. One could make a "good enough" argument for 1995, maybe even for 2005 although that would be seriously pushing it as that's after Blaster [1], but the fact that they're still selling vehicles with this system is really bad. [1] The Blaster worm woke up a lot of people to the very real problem of security vulnerabilities https://en.wikipedia.org/wiki/Blaster_(computer_worm) https://en.wikipedia.org/wiki/Blaster_(computer_worm)
- slavik81 10y agoI'm curious how secure physical car locks are for comparison. Bike locks and house locks are not particularly effective against skilled attackers. They exist mostly to stop the stupid and opportunistic.
- ams6110 10y agoCar locks are as secure as the pane of glass just above them.
- wepple 10y agoa modern iPhone can stand up pretty well to physical access for extended periods of time. In fact, the attack used in this whitepaper would've likely been thwarted had VW used a secure hardware device analogous to the iPhone's secure enclave.