SoylentNews is people
SoylentNews
A flaw buried deep in the hearts of all modern cars allows an attacker with local or even remote access to a vehicle to shut down various components, including safety systems such as airbags, brakes, parking sensors, and others.
The vulnerability affects the CAN (Controller Area Network) protocol that's deployed in modern cars and used to manage communications between a vehicle's internal components.
The flaw was discovered by a collaborative effort of Politecnico di Milano, Linklayer Labs, and Trend Micro's Forward-looking Threat Research (FTR) team.
Researchers say this flaw is not a vulnerability in the classic meaning of the word. This is because the flaw is more of a CAN standard design choice that makes it unpatchable.
Patching the issue means changing how the CAN standard works at its lowest levels. Researchers say car manufacturers can only mitigate the vulnerability via specific network countermeasures, but cannot eliminate it entirely.
"To eliminate the risk entirely, an updated CAN standard should be proposed, adopted, and implemented," researchers say. "Realistically, it would take an entire generation of vehicles for such a vulnerability to be resolved, not just a recall or an OTA (on-the-air) upgrade."
[...] The Department of Homeland Security's ICS-CERT has issued an alert regarding this flaw, albeit there is little to be done on the side of car makers.
"The only current recommendation for protecting against this exploit is to limit access to input ports (specifically OBD-II) on automobiles," said ICS-CERT experts in an alert released last month.
[...] The research was presented last month at the DIMVA conference in Bonn, Germany. The technical paper detailing the flaw in depth is available here and here. A YouTube video recorded by Trend Micro researcher Federico Maggi is available.
Source: Bleeping Computer
(Score: 2) by mhajicek on Saturday August 19 2017, @06:02PM (2 children)
You're sure in a childish mood, aren't you? I'll refrain from responding in kind.
If what you say is true this guy shouldn't have had any problem stopping his Prius:
"Closed captioning of: Driver claims Prius went wild on freeway
live interview.
but we begin with the wild ride involving a runaway toyota prius on a highway in california. miguel almaguer has more details.
reporter: the 61-year-old driver who has a heart condition says he did everything he could to slow down that prius , but he says the car kept going faster and faster. wedged behind a california highway patrol cruiser, the 2008 prius sat idle after a terrifying 30-mile ride that nearly cost james sikes his life.
still shook up.
reporter: it began when he tried to pass another driver and his car accelerated out of control. as he dodged other vehicles, sikes says the brakes didn't work. soon, he was doing 90. he called 911.
i was on the brakes pretty healthy. it wasn't stopping, wasn't doing anything to it, and just kept speeding up.
reporter: the patrol car pulled alongside using the p.a. system to relay instructions -- keep pressure on the brake, try to shut the car off.
when i saw him, i could smell the brakes. i saw his brake lights coming on.
i was standing on the brake pedal , looking out the window at him, and he said, "push the emergency brake , too," and i laid on both of them.
reporter: suddenly, the car began to slow down, dropping to 55 miles per hour. the chp cruiser moved in front of the hybrid, guiding the prius to a stop on the interstate. sikes just had his car serviced at a local dealer. mechanics told him his car wasn't a part of any recall, but eventually, some prius models were recalled for floor mats or brake problems. toyota 's recalled 8.5 million vehicles worldwide and 6 million here in the u.s. now the company says it's investigating this latest incident.
do you solemnly swear --
reporter: just last month, congress held hearings on the toyota recalls after the government received complaints of over 30 deaths linked to sudden acceleration since 2000 .
it's really starting to feed in and fuel a sense that possibly toyota really doesn't know what the situation is and it's a mystery that we're all going to have to discover together.
reporter: the investigation into what happened in this case could take weeks, but damage to toyota 's reputation may already be done.
i won't drive that car again, period.
reporter: this morning, both the california highway patrol and toyota say they are investigating the incident. in fact, toyota officials say they're sending a representative here to southern california to take a look at that car. matt?
hey, miguel , the highway patrolman said he told the driver to turn the ignition off. the driver did not do that, though, correct? why?
reporter: the driver said he did everything he could to turn off that car, matt, and of course, remember, these priuses don't have those key switch ignitions, they have those buttons, and the driver may have had some concern that he would have lost his power steering at speeds up to 90 miles per hour, but he does say he did everything he could to turn off that car.
all right, miguel almaguer for us this morning. miguel , thanks very much. it's now five"
http://www.nbcnews.com/id/35783011/ns/business-autos/t/how-stop-your-car-when-throttle-stuck/#.WZh8LFV96iO [nbcnews.com]
The spacelike surfaces of time foliations can have a cusp at the surface of discontinuity. - P. Hajicek
(Score: 1, Troll) by Grishnakh on Sunday August 20 2017, @12:31AM (1 child)
You're a fucking idiot. C&D tested this stuff as I showed. I remember this incident well; this guy wasn't in any danger, he was making the whole thing up so he could sue Toyota.
The brakes work fine in an incident like that; you step on them and stop the car. Priuses do not have a lot of power. And his lies about not being able to turn off the car are bullshit too; you just press and hold the start button.
Give it up. You have no fucking clue what you're talking about, and it becomes ever more apparent with each of your pathetic replies.
(Score: 2) by mhajicek on Sunday August 20 2017, @06:37AM
You're a childish ninny. But that's ok, you have the right to be wrong.
The spacelike surfaces of time foliations can have a cusp at the surface of discontinuity. - P. Hajicek