Siamo sicuri di volere l'auto ultraconnessa? Hacking a Jeep Cherokee

[Cosimo]

Chrysler richiamerà 1,4 milioni di auto in via precauzionale

Hackers have scared Chrysler into taking 1.4 million cars off the road

Edit: a che minchia serve accendere il motore da smartphone? Seriamente...

se non sei james bond non puoi capirlo

[Beckervdo]

se non sei james bond non puoi capirlo

[crabble]

https://www.youtube.com/results?search_query=remote+engine+start

[mariola]

se non sei james bond non puoi capirlo

Beh, se la metti su questo piano...

[Bosco]

Non per vantarmente, ma il Nokia che impugna Bond, era uguale al mio

Per adesso non ho problemi, il mio veicolo è tutto meccanico (gestione motore si intende), quindì la mia unica preoccupazione è schivare le auto hackerate che mi verranno addosso

[loric]

https://www.youtube.com/results?search_query=remote+engine+start

Ho visto un paio di quei video e di accensione via internet neanche l'ombra. Perché è quello il problema, eh.

[crabble]

Ho visto un paio di quei video e di accensione via internet neanche l'ombra. Perché è quello il problema, eh.

Non so che hai visto, comunque il problema è uguale se funziona con la chiave eh...

Ad ogni modo, c'è perfino un famoso produttore di kit di accensione remota, si chiama Viper, e ovviamente ha la sua app:

"Start your car from virtually anywhere with your iPhone! As seen in the iPhone TV ads. “Making the cloud-connected car a reality” "

https://itunes.apple.com/us/app/viper-smartstart/id333400981?mt=8

Più internet di così

In america quasi ogni auto ha la sua app per il controllo remoto (via internet).

Remote Features

With the MyLincoln Mobile app installed on your smartphone, you can easily unlock, lock, remote start or find your MKC (with available modem) from virtually anywhere in the world. MyLincoln Mobile even allows you to manage a remote start schedule to customize your Lincoln’s in-vehicle temperature before taking the wheel. MyLincoln Mobile also performs Vehicle Health diagnostics, so that you can remotely monitor your vehicle’s fuel level, odometer, tire pressure, and battery life. Responding to this data by taking preventative action before problems occur can help increase your personal safety while on the road. Learn how to use My Lincoln Mobile's remote start features.https://owner.lincoln.com/how-tos/owner-services/profile-and-account/mylincoln-mobile-app.html

ecc...

uguale chevrolet, cadillac, ford, ecc.. tutti insomma

[loric]

Non so che hai visto, comunque il problema è uguale se funziona con la chiave eh...

Non è uguale, tutt'altro, per esempio la chiave implica che l'agente debba essere in prossimità dell'autoveicolo, mentre nel caso di macchina collegata ad Internet, l'agente può essere anche a 10000 Km di distanza. La differenza più importante è però un'altra: tramite l'accesso ad Internet, se vengono bypassate le protezioni, è possibile un controllo praticamente totale sull'elettronica dell'auto. Col telecomandino della chiave no.

[crabble]

[h=1]A hacker made a $30 gadget that can unlock many cars that have keyless entry[/h]

Samy KamkarThe hacking gadget is about the size of a wallet.

For about $30, a hacker has made a device that can unlock many cars that use keyless entry.

Samy Kamkar, who recently revealed he built a device that could breach GM cars wirelessly, told Tech Insider that his latest gadget exploits a basic vulnerability in car and garage key remotes that has existed for quite some time.

Here’s the gist: Car key remotes, like garage remotes, use rolling code to authenticate access. Rolling code is basically just code that changes every time so that no one can use it later. So typically when you hit "unlock" on your remote key, a unique code is sent to the car’s system, the doors open, and that code will never be used again.

But there’s a catch. While the same code cannot be used twice, there is no expiration date on when the code can be used.

So Kamkar built his device, called the RollJam, to take advantage of that flaw.

It works like this: A hacker places the wallet-size device somewhere on the targeted car and then when the owner tries to unlock their vehicle by pressing the ‘Unlock’ button on their remote, the device jams the signal so that the vehicle’s system doesn’t hear it, while at the same time intercepting the code.

When the owner of the car tries to use the car key remote to unlock the vehicle a second time, the device jams the signal and steals a second code, but at the same time sends the first stolen code so that the driver can get in the car.

Now the hacker has one unique code left that can still be used because the car never heard that signal. All the hacker has to do is press a button on the Kamkar’s gadget and the car uses the stolen code that it saved to unlock the doors.

Kamkar said he has tried his device on a few different cars from different manufacturers, but has primarily been tested it on a Lotus Elise, because that is what he has had access to. He will reveal more details about how he conducted the exploit on Friday when he speaks at the hacking conference Defcon in Las Vegas.

“This has been sort of a theoretical attack for many, many years. This is not by any means brand new or a big surprise. The problem is no one has really demonstrated it, which is funny because the solution to this problem has been known about for more than 20 years online and has been written about many times, but again no one has demonstrated it,” Kamkar said.

“So a lot of manufacturers haven’t cared to solve the problem because it didn’t seem like a big enough problem. Unfortunately, I think it is a big problem.”

The problem really lies with the manufacturers who make the chips for the keyless entry, Kamkar said. The chip makers need to begin implementing expirations for the rolling code, which would essentially fix the problem.Kamkar said he knows of at least one chip maker who has fixed this issue.

techinsider

...

[Nico87]

Bisogna entrare nell'ottica di tenere fuori fisicamente la gestione della guida dalla connettività alla rete. A costo di non avere (o ripensare completamente il funzionamento) alcune funzioni da smartphone. La via BMW di una chiave con display gia mi sembra ottima. Consente l'uso delle funzioni solo a chi la ha e in un raggio limitato.

Diversamente, non sono riuscite a evitare intrusioni società che fanno dell'informatica il core business, (vedere worm blaster o sasser che tanti casini crearono in passato) figuriamoci se riusciranno ditte che sviluppano infotainment come complemento del veicolo.

E si che la posta in gioco è molto piu alta.

Sugli aerei, ad esempio la parte infotainment a bordo, wifi ecc... è completamente scollegata dall'avionica dell'aereo per perseguire la sicurezza totale. E su una macchina non deve essere diverso.