Thread: Security Vulnerabilities With The Latest "Internet Connected" Motor Vehicles

The subject discussed in the attached Internet Link is a subject that I expect we will start hearing much more about in the media over the coming months. The US Government is introducing new Legislation this month that sets computer security standards that US Motor Vehicle Manufacturers will need to adhere to. Europe is also debating similar new laws addressing this area.

Some new model vehicles being sold at the moment have facilities that enable the vehicle to be "Internet Connected". This involved the vehicle having a Mobile Phone SIM Card installed in the vehicle's wiring system somewhere. The SIM Card enables the car's entertainment system to obtain entertainment media from the Internet (via the mobile phone system) for the enjoyment of the car's passengers. The SIM Card, on some makes of vehicles, also enables the manufacturer to send software updates to the car's computer system, and in most cases the SIM Card allows the car's computer system to send error information and/or accident location information back to the car's manufacturer. Some manufacturers also include stolen vehicle tracking and remote stolen vehicle disabling via the same SIM card facility.

Over the last few years, a number of security Research Company's and some University Research Facilities, have been doing research to assess the safety/vulnerability of these Internet Connected Vehicles' computer systems. These are legitimate computer security researchers doing this work, and some of them are working using US Government or Euro Govt provided funding. Some of the research is now being published, which is why it is expected that we'll see a lot more about this subject in the media over the coming months.

The following article provides details of how a target vehicle (in this case a current model Jeep SUV) was able to he "hacked" over the mobile phone system, whilst the vehicle was being driven down the highway. During the security attack, the vehicles' radio, A/C, Brakes, Throttle, and Steering were able to be operated remotely, and/or disabled so that the driver lost control of the vehicle.

http://www.wired.com/2015/07/hackers...-jeep-highway/

Note: This article refers specifically and only to those types of motor vehicles that have a Mobile Phone SIM Card plugged into a slot somewhere in the vehicle's electrical system.

Those cars that use Bluetooth to connect to your phone to allow you to make hands-free phone calls while you're driving are not (as far as is being reported at this time) subject to the above type of attack.

Regards,

RoyG