Stories
Slash Boxes
Comments

SoylentNews is people

Wireless Device in Two Million US Cars is Wide Open to Hacking

posted by martyb on Thursday January 22 2015, @02:31AM   Printer-friendly
from the Progressive-for-the-hackers dept.

AnonTechie writes:

An electronic dongle used to connect to the onboard diagnostic systems of more than two million cars and trucks contains few defenses against hacking, an omission that makes them vulnerable to wireless attacks that take control of a vehicle, according to published reports.

US-based Progressive Insurance said it has used the SnapShot device in more than two million vehicles since 2008. The dongle tracks users' driving to help determine if they qualify for lower rates. According to security researcher Corey Thuen, it performs no validation or signing of firmware updates, has no secure boot mechanism, no cellular communications authentication, and uses no secure communications protocols. SnapShot connects to the OBDII port of Thuen's 2013 Toyota Tundra pickup truck, according to Forbes ( http://www.forbes.com/sites/thomasbrewster/2015/01/15/researcher-says-progressive-insurance-dongle-totally-insecure/ ). From there, it runs on the CANbus networks that control braking, park assist and steering, and other sensitive functions.

http://arstechnica.com/security/2015/01/wireless-device-in-two-million-cars-wide-open-to-hacking/

 
This discussion has been archived. No new comments can be posted.
Wireless Device in Two Million US Cars is Wide Open to Hacking | Log In/Create an Account | Top | 10 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 2) by dyingtolive on Thursday January 22 2015, @04:07AM

    by dyingtolive (952) on Thursday January 22 2015, @04:07AM (#136872)

    It's all fun and games until some misanthrope sends someone else's car barreling into a ditch with their phone, I guess.

    ...well, okay, that damn near happens all the time already, I guess.

    --
    Don't blame me, I voted for moose wang!
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  
    Total Score:   2  

  • (Score: 1) by tftp on Thursday January 22 2015, @07:12AM

    by tftp (806) on Thursday January 22 2015, @07:12AM (#136891) Homepage

    until some misanthrope sends someone else's car barreling into a ditch with their phone, I guess. ...well, okay, that damn near happens all the time already, I guess.

    Yes, but with the driver's own phone.