Hacking a Jeep's electronic control systems

[gone-ot]

Since nobody writes 100% perfect software code to begin with -- and such 'half-donkey-ed' code is *HOW* hackers gain entry & control -- that is *why* self-driving autonomous vehicles will NEVER grace my garage...nor will I knowingly ride in one.

[me and my metro]

That is why I own a 1984 Gmc Diesel pickup. There is nothing computerized on that truck. I also have a point ignition 68 Chevy pickup. Two fuel choices and no computer!

[freebeard]

Originally Posted by Old Tele man

Since nobody writes 100% perfect software code to begin with -- and such 'half-donkey-ed' code is *HOW* hackers gain entry & control -- that is *why* self-driving autonomous vehicles will NEVER grace my garage

It's an interesting problem. Software written by hoo-mans is suspect of course, but genetic algorithms can be applied to software bred for fitness for purpose. If you look at the Computerworld article, they discuss a 'hypervisor' to sanity-check the performance of the code in real time. Hackers rely on operating systems, and communication protocols. Embedded code running close to the metal has a minimal attack surface.

...nor will I knowingly ride in one.

Did you see the story where someone demoed the pedestrian safety feature in the new Volvo?

Fail! Demo of Volvo pedestrian safety system goes terribly wrong | www.krmg.com

Motto: know what's under your hood. Meanwhile I have a mechanical fuel pump, cable-driven speedometer and electrical gas gauge and warning lights. The speedometer and gas gauge are both inaccurate.

[Xist]

I do not know how anyone could hack my Civic. I am more worried about Frank Lee figuring out where I live and asking to borrow a cup of sugar.

[freebeard]

If he showed up at my door wearing that Ed Roth hat, it would be worth a cup of sugar.

[California98Civic]

Originally Posted by Xist

I do not know how anyone could hack my Civic. I am more worried about Frank Lee figuring out where I live and asking to borrow a cup of sugar.

Originally Posted by freebeard

If he showed up at my door wearing that Ed Roth hat, it would be worth a cup of sugar.

Frank Lee for EM patron saint of cheap travel. St. Cheapstopher.

Wait... what was the topic of this thread again?

[freebeard]

From http://thehackernews.com/2015/07/car-hacking-jeep.html

• 2013-2015 MY Dodge Viper specialty vehicles
• 2013-2015 Ram 1500, 2500 and 3500 pickups
• 2013-2015 Ram 3500, 4500, 5500 Chassis Cabs
• 2014-2015 Jeep Grand Cherokee and Cherokee SUVs
• 2014-2015 Dodge Durango SUVs 2015 MY Chrysler 200, Chrysler 300 and Dodge Charger sedans
• 2015 Dodge Challenger Sports coupes

Edit: I watched the Script Your Car video again and learned some new things.

In a non-OBDII RV, like a cedar cabin on an old log truck or even a 'tiny house', rather than plug in an old PC; you could get a VAG CAN bus controller for 200(euros? plus a daughtercard upgrade and added USB port) and have a CPU from a Nokia smart phone and another CPU from an Android tablet running Linux in OEM-grade automotive components. He demonstrates this running on the podium from a regulated 12v power supply—3G, Wi-fi hotspot, audio streaming over Bluetooth, voice synthesis and recognition, &etc.

The CAN bus controller runs Linux, but they never delivered the source code with the car—a clear violation of the GPL. Lots of hacker mirth at that.

There's a lot about the BAP (display controller) and something called D-Bus I still don't get.

[jamesqf]

Originally Posted by Old Tele man

Since nobody writes 100% perfect software code to begin with -- and such 'half-donkey-ed' code is *HOW* hackers gain entry & control...

Not in this case, if I understand correctly. The problem was not that buggy code allowed a hack, it was that there was no barrier to gaining access at all, other than needing to understand the system.

And if the software in cars bothers you, don't even think about the typical commercial airliner :-)

[gone-ot]

...yeah, I know, I was a "flyer" in USN...but my planes all used reciprocating engines and NO computers except us human-cargo "computers" (ha,ha).

[Fat Charlie]

It's just too easy.

Corvette's brakes hacked via insurance company device

Insurance dongle frequently used by Uber could be hacked regardless of vehicle make