+46 46 0
Published 8 years ago by FrootLoops with 15 Comments

Join the Discussion

  • Auto Tier
  • All
  • 1
  • 2
  • 3
Post Comment
  • [Deleted Profile]

    [This comment was removed]

  • idlethreat (edited 8 years ago)
    +7

    What the hell? Didn't airlines already solve this fucking problem decades ago? You do not place critical flight control systems (e.g. flaps, gears, brakes, whatever) on the same network as what can be accessible to everyone else. Two airgapped networks. Put them together, and you get this stupid shit.

    ...most of their attacks could be tweaked to work on any Chrysler vehicle with the vulnerable Uconnect head unit.

    Chrysler's going to have to get in front of this or their stock prices drop harder than a hooker at Mardi Gras.

    • ColdwaterQ (edited 8 years ago)
      +3

      Airlines haven't solved this, a security researcher recently hacked an air plane. He did so through the infotainment system which is that computer on the back of the seat in front of you. This is a link explaining some of it. http://www.wired.com/2015/05/possible-passengers-hack-commercial-aircraft/

      Edit: read the comment from idlethreat, I was mistaken and he points it out which I am grateful for.

      • idlethreat (edited 8 years ago)
        +4

        Soif Roberts wasn’t able to alter the thrust of an engine, would he have at least been able to access the avionics system to do other things? Soucie and Lemme say no.

        the ARINC 429 is an output-only hub that allows data to flow out from the avionics system but not back to it

        although inflight systems “receive position data and have communication links” to other systems on the plane, they are “isolated” from systems that perform critical functions.

        ...All of this appears to add up to the conclusion that there’s no way Roberts could have hacked the thrust controls of a plane and manipulated the aircraft, either through the IEF, the SATCOM or anything else.

        I could go on and on, but according the article you cited, it didn't happen that way. Yes, dude issued commands on that bus. Not disputing it. But, the bus isn't designed to accept commands. The inflight and avionics are separated. It's a good design. one which the automotive industry apparently have not followed.

        It's also a sad case of people calling themselves security researchers and go out of their way to puff up their claim as big as possible so they can sell it to whatever news company they can. People like this guy give actual researchers a bad name.

        • ColdwaterQ
          +4

          As is obvious, I hadn't read all of the article, so sorry for that. I had heard of this a bit back and was just trying to share what I thought was the article I had read before.

          I agree that cars should separate the bus controlling functionality from the bus that controls less critical things like I now know planes do.

          I also agree that he gives security researchers a bad name in many regards, for over inflating his claim as I now know, and for even considering doing what he claimed to do.

          Again sorry about the bad info, and thanks for pointing it out to me.

          • idlethreat
            +2

            Hoping my reply back didn't come off combative. Was afraid of that. Wasn't my intent at all.

            The mistake isn't your fault, I blame what shit passes for "journalism" these days where they take 10 paragraphs to explain how horrible it could be, but only slip in a couple of sentences showing that it really didn't quite happen the way it was described. Drives eyeballs, drives ads.

            • ColdwaterQ
              +2

              It didn't feel combative to me, corrections to mistakes are greatly appreciated. And even if I am not completely to blame, I still feel bad for helping to spread misinformation.

  • stoa
    +3

    And this is why my smart tv is not connected to the internet. But then again, some people buy those Belkin WeMo switches to give WAN remote control to all their electronics ~_~

    • RedditExodus
      +2

      This is why I am terrified of everything moving to the cloud.

      Or when I can't manually overide/cut the power (which most times is me removing the battery or pulling the cord)

  • Kysol (edited 8 years ago)
    +2

    He bought a Jeep!

    I was like 2 minutes too slow. Was just about to post this.

    • FrootLoops
      +3

      hehe i am sorry. :)

      • Kysol
        +2

        That was your queue to say "Should have bought a Jeep!". All good though, at least I used Search to spot the article before reposting it and claiming all the glory.

  • PushPull
    +2

    Thinking ahead, I can see hackers and terrorists exploiting this.

    Hackers could use it to gain either money or information by holding your car hostage. Imagine going on a long road trip, you're a thousand miles from home, and you get a notice through your console that unless you pay $xxxx, or give up a credit card number, you're not going anywhere.

    Terrorists could be able to seize on this as well. Imagine rush hour, traffic is moving along nicely, everyone is going 55 or so, and in unison, they lock up the brakes on a few dozen cars in a small stretch. They could cause a huge pile up that closes shit down for days.

    • idlethreat
      +4

      Aah, hell. I'd expect Anonymous to do it just for the shits and giggles. No need for terrorists when you have a bunch of bored people in their mom's basements.

Here are some other snaps you may like...