« previous next »
Pages: [1]   Go Down

Author Topic: New vulnerability lets attackers hijack Chrysler vehicles over the web  (Read 1316 times)

0 Members and 1 Guest are viewing this topic.

Offline BlueStateSaint

  • Here I come to save the day, because I'm a
  • Hero Member
  • *****
  • Posts: 32553
  • Reputation: +1560/-191
  • RIP FDNY Lt. Rich Nappi d. 4/16/12
New vulnerability lets attackers hijack Chrysler vehicles over the web
« on: July 21, 2015, 12:37:49 PM »
It was only a matter of time before hackers got the ability to do this.

Quote
New vulnerability lets attackers hijack Chrysler vehicles over the web



By Russell Brandom
 on July 21, 2015 10:57 am

A new vulnerability in the Uconnect system gives attackers frightening remote powers over Chrysler vehicles, revealed in a Wired exclusive report. In a live demo, attackers used the vulnerability to cut out a Jeep Cherokee's transmission and brakes and, when the car is in reverse, commandeer the steering wheel — all without physical access to the vehicle. "This might be the kind of software bug most likely to kill someone," said Charlie Miller, one of the researchers behind the exploit. The full vulnerability will be presented next month at Defcon, although the researchers plan to withhold crucial details so that the bug cannot be exploited at scale.
 
Chrysler's UConnect system uses Sprint's cellular network for connectivity, so researchers were able to remotely locate cars by scanning for devices using that particular spectrum band. Chrysler has been including UConnect in cars since late 2013, and any cars that use the system are likely to be vulnerable to the attack. There's no apparent firewall, so once attackers have located the device's IP, they can deploy previously developed exploits to rewrite Uconnect's firmware and control the car as if they had physical access. The result is that once an attacker has a car's IP address, she can target it from anywhere in the country.
 
--------------------------------------------------------------------------------

The good news for Chrysler drivers is, there's already a patch — but it probably hasn't reached your car yet. Chrysler released a patch on the 16th, but it has to be installed manually, either by a dealership mechanic or manually via USB. It can be downloaded here. The vulnerability has also inspired government action, as a new automotive security bill is being introduced in the Senate alongside the report.
 
7/21 11:48am ET: This article previously referred to the test vehicle as a Jeep Grand Cherokee. The correct name is simply Jeep Cherokee.

That's the whole article.  The link: http://www.theverge.com/2015/7/21/9009213/chrysler-uconnect-vulnerability-car-hijack

Messed up! :panic:
Logged
"Timid men prefer the calm of despotism to the tempestuous sea of Liberty." - Thomas Jefferson

"All you have to do is look straight and see the road, and when you see it, don't sit looking at it - walk!" -Ayn Rand
 
"Those that trust God with their safety must yet use proper means for their safety, otherwise they tempt Him, and do not trust Him.  God will provide, but so must we also." - Matthew Henry, Commentary on 2 Chronicles 32, from Matthew Henry's Commentary on the Whole Bible

"These anti-gun fools are more dangerous to liberty than street criminals or foreign spies."--Theodore Haas, Dachau Survivor

Chase her.
Chase her even when she's yours.
That's the only way you'll be assured to never lose her.

Offline DumbAss Tanker

  • Hero Member
  • *****
  • Posts: 28493
  • Reputation: +1710/-151
Re: New vulnerability lets attackers hijack Chrysler vehicles over the web
« Reply #1 on: July 22, 2015, 08:23:33 AM »
I don't need a smart car.  I need a car that is mechanically reliable, simple and inexpensive to repair, and reasonably safe.  I don't give a shit about any other so-called conveniences.  Unfortunately America is unable to produce such a vehicle anymore.
Logged
Go and tell the Spartans, O traveler passing by
That here, obedient to their law, we lie.

Anything worth shooting once is worth shooting at least twice.

Offline Chris_

  • Little Lebowski Urban Achiever
  • Hero Member
  • *****
  • Posts: 46845
  • Reputation: +2028/-266
Re: New vulnerability lets attackers hijack Chrysler vehicles over the web
« Reply #2 on: July 22, 2015, 09:00:32 AM »
How do you tell the difference between a hack and Chrysler's regularly shitty build quality?
Logged
If you want to worship an orange pile of garbage with a reckless disregard for everything, get on down to Arbys & try our loaded curly fries.

Offline thundley4

  • Hero Member
  • *****
  • Posts: 40571
  • Reputation: +2224/-127
Re: New vulnerability lets attackers hijack Chrysler vehicles over the web
« Reply #3 on: July 22, 2015, 03:51:41 PM »
Quote from: DumbAss Tanker on July 22, 2015, 08:23:33 AM
I don't need a smart car.  I need a car that is mechanically reliable, simple and inexpensive to repair, and reasonably safe.  I don't give a shit about any other so-called conveniences.  Unfortunately America is unable to produce such a vehicle anymore.

Exactly.  I don't believe all the computer and electronic crap are required to get reasonable power and fuel economy. Give me a car with AC/Heat and a radio and I'm  good.
Logged
Pages: [1]   Go Up
« previous next »