Hackers Remotely Kill a Jeep on a Highway | WIRED
WIRED0 HN recommenders · 2021–2023
4.6M views · news · dated · Uploaded 2015-07-21
WIRED's Andy Greenberg drives a Jeep on a highway while two hackers take control of it remotely over the internet. They manipulate the car and then cut the engine. The video accompanies the 2015 article on the Jeep Cherokee hack.
HN cites it as the standard precedent for remote car hacking whenever connected or self-driving vehicle security comes up.
9:31Around The Corner - How Differential Steering Works (1937)
US Auto Industry
51:32Behind the Scenes of iOS Security
Black Hat
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
42:50Defcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
59:2328c3: The Science of Insecurity
28c3
17:08Cities Aren't Loud: Cars Are Loud
Not Just Bikes
49:47DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
4 comments from Hacker News
The real Goosebumps for devs is cars willing to take driving inputs over their built-in networks from outside the car. [VIDEO]
The camera is what scares them? For me it would be remote take-over. You are experiencing a car accident [1] But seriously, these companies get hacked [2]. Remote control hacks have been done on several cars that aren't even fully self-driving. [3] No idea if anyone has taken full control of a Tesla yet. Their remote entry has been hacked many times but that is a different system. If you could hack this [4] you just need to overcome the 4mph speed limit safety control. [1] - [LINK] [iRobot, just for fun] [2] - [LINK] [Tesla being attacked] [3] - [VIDEO] [Jeep Cherokee remotely hacked and controlled while driving] [4] - [LINK] [Remote Control Range Rover Sport]
There's been at least one car[1] where hackers gained access to the car electronics through the infotainment system. Not sure about the Tesla, but several other cars[2] have their infotainment connected to the rest of the control systems. So in general, it's not "just" the infotainment system. [1]: [VIDEO] [2]: [LINK]
Addressing your points in order: - Human hackers who run a botnet of infected computers are not able to run many instances of themselves on those computers, so they're not able to parlay one exploit into many exploits. - You might notice I said it would take over hundreds of millions of computers, but only run millions of instances of itself. If 1% of internet-attached computers have a decent GPU, that seems feasible. - If it has found exploits in the software, it seems irrelevant what the interfaces "allow", unless there's some hardware interlock that can't be overridden—but they can drive on the highway, so surely they are able to accelerate at least to 65 mph; seems unlikely that there's a cap. If you mean that it's difficult to work with the software to intelligently make it drive in ways it's designed not to—well, that's why I specified that it would use the software the way it's designed to be used to get onto a main road, and then override it and blindly max out the acceleration; the first part requires minimal understanding of the system, and the second part requires finding a low-level API and using it in an extremely simple way. I suspect a good human programmer with access to the codebase could figure out how to do this within a week; and machines think faster than we do. There was an incident back in 2015 (!) where, according to the description, "Two hackers have developed a tool that can hijack a Jeep over the internet." In the video they were able to mess with t