4 ms·
Sadly, the segregation between CAN buses is not nearly as good as you would think. ONSTAR, for example, sits on the drive critical bus (and is exploitable). Of
by anologwintermut 13y ago
Sadly, the segregation between CAN buses is not nearly as good as you would think. ONSTAR, for example, sits on the drive critical bus (and is exploitable). Of course, this is not on a Tesla, but still.
http://www.autosec.org/pubs/cars-usenixsec2011.pdf http://www.autosec.org/pubs/cars-usenixsec2011.pdf
- gcr 13y agoA few years back, a joint UW-UCSD team showed that car systems are remotely exploitable. They were able to literally call the car's cell phone number and control the brakes/gas/door locks remotely. http://youtu.be/bHfOziIwXic http://youtu.be/bHfOziIwXic
- gcr 13y ago(oops, sorry about gratuitous use of "literally" -- i should learn not to editorialize better)
- anologwintermut 13y agoThe above paper is one of two the UW/UCSD group wrote.
- el_benhameen 13y agoI'm probably missing something here, but wouldn't it make sense for ONSTAR to sit on the drive critical bus? If it's able to monitor collision data and (in newer models) slow down a stolen car, it'd need access to drive-control systems.
- obituary_latte 13y agoI'm unsure whether it makes sense in the context of safety. However, in the context of being able to sell the product as having those features - makes perfect sense.
- tlrobinson 13y agoAssassination via car hacking would have seemed like sci-fi a decade or two ago. See Michael Hastings conspiracy theories: http://www.huffingtonpost.com/2013/06/24/michael-hastings-car-hacked_n_3492339.html http://www.huffingtonpost.com/2013/06/24/michael-hastings-ca...
- rdl 13y agoAssassination via physical-access car hacking (cutting brake lines, etc.) has been around for a long time. Seems like a small jump to electronic.
- ferongr 13y agoHas there ever been a successful assassination using this method? If some cut my brake lines I would know about it the moment I started the engine and applied the service brakes while putting the car into drive/releasing the e-brake, or become aware of it while maneuvering out of a parking space at speeds under 5mph.
- DanBC 13y agoThe theory is that the brake lines are weakened and fail at some point during the journey.
- btbuildem 13y agoNot necessarily -- it would take a good few pumps of the pedal to introduce enough air into the system for the brakes to become ineffective.
- rdl 13y agoThere are a bunch of cases of amateurs who do this. http://www.dailymail.co.uk/news/article-2081590/Man-arrested-cutting-brake-line-girlfriends-car.html http://www.dailymail.co.uk/news/article-2081590/Man-arrested... http://www.ktbs.com/story/22346692/man-accused-of-trying-to-kill-co-worker-by-cutting-brake-line http://www.ktbs.com/story/22346692/man-accused-of-trying-to-... I'm more used to people just putting car bombs on the vehicles, though. You should be good with the e-brakes, and should never 100% depend on your primary brakes when driving, but in practice I'm sure a lot of people get into situations where they wouldn't know to switch to e-brake if the main brakes failed, or wouldn't have time. The biggest risk to the assassin is that car accidents in modern cars just aren't that fatal -- you can hit another car head-on at 60mph and, with seatbelts, non-offset crash, airbags, etc., either walk away or at least survive at a hospital. It also leaves enough forensic evidence, especially if the driver survives and reports "my brakes just didn't work!" that it wouldn't be surreptitious. A bomb isn't likely to be taken as an accident, either, but is at least likely to be effective.