4 ms·
I'm tired of articles that explain absolutely nothing about the actual methodology of the hack. Does Jeep Cherokee have separate buses for high-speed controlle
by romaniv 11y ago
I'm tired of articles that explain absolutely nothing about the actual methodology of the hack.
Does Jeep Cherokee have separate buses for high-speed controller and low-speed infotainment CAN? (That's the usual setup.) What controller acts as the gateway between them? Is it read-write (which would be incredibly dumb) or did they actually hack that controller after hacking infotainment?
I had shown similar articles/research papers to my friends working in automotive. They pointed out several factual mistakes and said it's generic fluff with no meaningful technical details. (See the questions above.)
If realistically exploitable, these vulnerabilities are serious stuff. Hackers/journalists need to get their shit together and communicate these findings in an appropriate way. 99.9% of automotive engineers do not go to Black Hat conference.
- lawnchair_larry 11y agoSee the wired article.
- romaniv 11y agoI saw it. It doesn't answer any of the questions above. The fact that they were able to hack an infotainment system connected to the internet is not surprising. Anyone who knows how those things are written sort of assumed that this was possible. The noteworthy part of this is being able to bridge the gap between the two CAN networks, and it's not explained in any way.
- mzs 11y agoThe thing is that your questions aren't really very applicable. For example if there is a high speed and low speed CAN bus or just one really does not matter cause of details about how it works. Also that applies to the question about read/write/modify - that's not really how CAN bus works at all, it's more like commands and there are some nifty ways to filter, like codes needed. For yesterday's article it boils down to modules not doing careful enough verification and likely a really boneheaded in hindsight mistake in the Uconnect software. The talks will be great resources for a lot of people, I'm eagerly awaiting them.
- romaniv 11y agoFor example if there is a high speed and low speed CAN bus or just one really does not matter cause of details about how it works. It matters a lot. Typically, there is a gateway (in body or chassis controller) between the two (or three) buses. It puts some messages from the controller bus onto infotainment bus, but not the other way around. It's done specifically to prevent infotainment systems interfering with workings of the car. If Jeep has everything running on the same bus, it's incredibly stupid.
- mzs 11y agoThat is a bit over simplified. In practice more is passed, but for example the ECU ignores based on rules like RPM above X, TCM not in P, and so on. There is pressure to move to a single high speed bus and modules that pass messages based on priority and time.
- mzs 11y agoMy hunch is that NCC has notified the manufacturer privately.