Search forums

Forums

Export thread

Hackers can seriously mess up your Jeep Cherokee

Jul 21, 2015#1

GasBandit

What a time to be alive.

http://dailyoftheday.com/caution-of-the-day-jeep-cherokee-hacked/

FTA:

He was driving a Jeep Cherokee when the vents began blasting cold air and the radio station changed channels and began blasting at full volume. He was unable to turn the radio off, change the channel or turn it down. Then the windshield wipers turned on, with wiper fluid blurring the glass. As an added touch, the two hackers projected an image of themselves on the Cherokee’s digital display.

But all of that pales compared to what they did next. They cut the transmission, causing the jeep to lose speed as the RPMs climbed – this while the Wired writer was on the highway, with traffic stacking up behind him and an 18-wheeler closing in. He managed to roll the jeep down an exit ramp and finally got the transmission back in gear, moving to an empty lot for the rest of an experiment. That’s when they cut the brakes. Pumping the brake pedal was futile, and the Jeep rolled into a ditch. Other attacks that are possible include taking control of the vehicle’s steering (so far only while it’s in reverse, but they’re working on that), and completely killing the engine. And they did all of this from the comfort of their couch at home, miles away from the vehicle.

Jul 21, 2015#2

Hailey Knight

Computerized cars ... how couldn't they see this coming?

There's no such thing as hack-proof, which means that no matter how good of security this test could potentially garner, it will never be perfect, and you're left with the possibility of someone else taking over your vehicle.

Jul 21, 2015#3

Amy

Welp, I'm off to the dealership. Yaaay!

Jul 21, 2015#4

GasBandit

Amy said:
Welp, I'm off to the dealership. Yaaay!

amys@jeep~$
amys@jeep~$
amys@jeep~$
amys@jeep~$ hackjeep
bash: hackjeep: command not found
amys@jeep~$ sudo hackjeep
bash: now driving Amy's Jeep to Texas
amys@jeep~$

Jul 21, 2015#5

PatrThom

It's stuff like this that makes me roll my eyes at the supposed "need" for companies to engineer mandatory backdoor access to their systems "because terrorism."

"Because terrorism," indeed.

GasBandit said:
bash: now driving Amy's Jeep to Texas
amys@jeep~$

Yes, @figmentPez could use a hand.

--Patrick

Jul 21, 2015#6

Amy

You know that Jeeps can't refuel themselves yet, right?

Jul 21, 2015#7

GasBandit

PatrThom said:
Yes, @figmentPez could use a hand.

--Patrick

That's not something you should be doing "the thing" about, man.

Jul 21, 2015#8

PatrThom

GasBandit said:
That's not something you should be doing "the thing" about, man.

I stand by my assertion.

--Patrick

Jul 21, 2015#9

fade

I don't understand why the uconnect system is connect to drive components at all, though.

Jul 21, 2015#10

PatrThom

fade said:
I don't understand why the uconnect system is connect to drive components at all, though.

"Eventual enhancement."

--Patrick

Jul 21, 2015#11

GasBandit

PatrThom said:
I stand by my assertion.

--Patrick

Then I am severely disappointed in you.

Jul 21, 2015#12

fade

It is straight up Linux though. I updated my wife's Fiat.

Jul 21, 2015#13

AshburnerX

Amy said:
You know that Jeeps can't refuel themselves yet, right?

If Maximum Overdrive has taught me anything, it's that they can force the issue if you don't.

Jul 21, 2015#14

Amy

fade said:
It is straight up Linux though. I updated my wife's Fiat.

On whose authority?[DOUBLEPOST=1437538815,1437538782][/DOUBLEPOST]

AshburnerX said:
If Maximum Overdrive has taught me anything, it's that they can force the issue if you don't.

THANKS A LOT NEVER SLEEPING AGAIN

Jul 21, 2015#15

GasBandit

Amy said:
On whose authority?

Root, probably.

Jul 21, 2015#16

AshburnerX

Amy said:
THANKS A LOT NEVER SLEEPING AGAIN

This god damn thing used to give me nightmares as a kid.

Jul 21, 2015#17

Amy

AshburnerX said:
View attachment 18813

This god damn thing used to give me nightmares as a kid.

IT STILL GIVES ME NIGHTMARES SO THANKS!

Jul 22, 2015#18

PatrThom

GasBandit said:
Then I am severely disappointed in you.

Pez needs help, Amy seems full of useful info, I don't see how this is a bad thing.

--Patrick

Jul 22, 2015#19

Frank

Not surprised to learn it's UConnect. Dealing with it trying to use the fucking Bluetooth in my buddy's car has shown me I never want any vehicle that has UConnect in it ever, for any reason. Now I feel doubly justified.

Jul 22, 2015#20

Bubble181

PatrThom said:
Pez needs help, Amy seems full of useful info, I don't see how this is a bad thing.

--Patrick

I can honestly say, I don't see modern-day Amy showing up at Pez' doorstep for some talking and support as a bad thing. Amy from a few years ago, admittedly, might not've been as good a choice

Jul 22, 2015#21

sixpackshaker

Why the fuck would someone engineer the entertainment system to be handled by the same system that governs the safety of the car?

The important shit should only get its updates from a hands on device.

Jul 22, 2015#22

Eriol

It's just poor system design. Even if you subscribe to the idea that they should all be connected, that they aren't isolated from each other is just idiotic. There's a NUMBER of ways of doing such (SELinux if nothing else), but nobody bothered.

Jul 22, 2015#23

drawn_inward

That's great. In the future, we'll have to update our car OSs and deal with bad patches on top of the mechanical issues.

My inner paranoid self is saying that all of this new tech is a ploy to allow Big Brother to mass control our vehicles to shut down any insurrections.

Jul 22, 2015#24

Bubble181

drawn_inward said:
That's great. In the future, we'll have to update our car OSs and deal with bad patches on top of the mechanical issues.

My inner paranoid self is saying that all of this new tech is a ploy to allow Big Brother to mass control our vehicles to shut down any insurrections.

To enforce speed limits, track vehicles after offenses and the like, mostly. And to tax based on road usage, obviously. Want to implement that in Belgium already....

Jul 22, 2015#25

drawn_inward

Bubble181 said:
To enforce speed limits, track vehicles after offenses and the like, mostly. And to tax based on road usage, obviously. Want to implement that in Belgium already....

That's great. My inner-voice is more sane than I thought. We're all in trouble.

Jul 22, 2015#26

fade

drawn_inward said:
That's great. In the future, we'll have to update our car OSs and deal with bad patches on top of the mechanical issues.

My inner paranoid self is saying that all of this new tech is a ploy to allow Big Brother to mass control our vehicles to shut down any insurrections.

Uconnect already does this. You can log into the uconnect site and download the latest patches onto a usb stick, plug it into the car's USB and update.

Jul 22, 2015#27

Ravenpoe

Wait... uconnect?

...

GODDAMMIT UBISOFT!

Jul 22, 2015#28

Amy

Ravenpoe said:
Wait... uconnect?

...

GODDAMMIT UBISOFT!

[DOUBLEPOST=1437599401,1437599305][/DOUBLEPOST]

GasBandit said:
amys@jeep~$
amys@jeep~$
amys@jeep~$
amys@jeep~$ hackjeep
bash: hackjeep: command not found
amys@jeep~$ sudo hackjeep
bash: now driving Amy's Jeep to Texas
amys@jeep~$