DAB raadio signaali kaudu häkiti "autosse"

[peeter3000]

UK NCC Group saatis autosse "data-koodi" läbi DAB raadiosignaali ja saavutas reaalselt kontrolli auto pidurite ja juhtimissüsteemide üle.

Car hack uses digital-radio broadcasts to seize control.
http://www.bbc.com/news/technology-33622298

Breached brakes

NCC demonstrated its technique to BBC Radio 4's PM programme at its offices in Cheltenham.

By using relatively cheap off-the-shelf components connected to a laptop, the company's research director, Andy Davis, created a DAB station.

Because infotainment systems processed DAB data to display text and pictures on car dashboard screens, he said, an attacker could send code that would let them take over the system.

Once an infotainment system had been compromised, he said, an attacker could use it as a way to control more critical systems, including steering and braking.

Depending on the power of the transmitter, he said, a DAB broadcast could allow attackers to affect many cars at once.

"As this is a broadcast medium, if you had a vulnerability within a certain infotainment system in a certain manufacturer's vehicle, by sending one stream of data, you could attack many cars simultaneously," he said.

"[An attacker] would probably choose a common radio station to broadcast over the top of to make sure they reached the maximum number of target vehicles."

Mr Davis declined to publicly identify which specific infotainment systems he had hacked, at this point.

[peeter3000]

teine rühm häkkis läbi neti sisse Jeepi juhtimissüsteemi ja seiskas mootori.
FiatChrysler kutsub nüüd tagasi 1.4 milj. autot, et parandada küberturvalisust..

http://www.bbc.com/news/technology-33650491
Fiat Chrysler has issued a safety recall affecting 1.4m vehicles in the US, after security researchers showed that one of its cars could be hacked.

On Tuesday, tech magazine Wired reported that hackers had taken control of a Jeep Cherokee via its internet-connected entertainment system.

Chrysler said it was issuing a voluntary recall to update the software in affected vehicles.

The company added that hacking its vehicles was a "criminal action".

Security researchers Charlie Miller and Chris Valasek demonstrated that it was possible for hackers to control a Jeep Cherokee remotely, using the car's entertainment system which connected to the mobile data network.

The two security researchers have spent years investigating car control systems and developing ways to subvert them. The pair are due to reveal more information about their work at the Def Con hacker conference next month.

Shortly after the recall was announced, Mr Miller tweeted: "I wonder what is cheaper, designing secure cars or doing recalls?"

Fiat Chrysler said exploiting the flaw "required unique and extensive technical knowledge, prolonged physical access to a subject vehicle and extended periods of time to write code" and added manipulating its software "constitutes criminal action".

[Dijital]

Viimase kohta ka eestikeelne uudisnupp:
http://forte.delfi.ee/news/auto/hakkeri ... d=71975321