Since cars get at least as often updated as routers, what could possibly go wrong? Seriously, with Android entertainment systems, GSM and Bluetooth for convenient wireless attacks and a government mandated connection between these and safety systems, like breaks, we just let fifteen year old script kiddies not only play with web servers but also with heavy, fast moving blocks of steel, that have people inside.
> A disgruntled former employee of Texas Auto Center chose a creative way to get back at the Austin-based dealership: He hacked into the company's computers and remotely activated the vehicle-immobilization system, which triggered the horn and disabled the ignition system in more than 100 of the vehicles. The dealership had installed the system in its cars as a way to deal with customers who fell behind on their payments.
I'm not going to get into the benefits of open source for consumer appliances, just that there is quite a bit of research into internal communication within the vehicle's operational systems and it's quite poor.
Giving all cars a 3G connection to the world and having shitty security means we're going to have a bad time. I had hopes with Google showing interest in getting Android into cars, but it's just for "infotainment" which in all likelihood means offloading the development of those shitty DVD players.
Updating the firmware of the various ECUs within your car involves bringing it to a dealership/repair shop, which probably means they're never going to get updated. Let that sink in for a moment -- imagine a plethora of Windows XP boxes having 3G connections and rarely getting updated even by the end-user.
Windows XP isn't a realtime operating system. You're not going to find it anything motor control related, and the infotainment system and control stuff are usually on physically seperate buses.
Of course the old adage applies, if you have access to the hardware, all security bets are off.
In a well designed system, the connections between the entertainment stuff and the safety systems should be one-way anyways right? Something like "if going over 5 mph turn off the screen".
I don't really know about the state of car entertainment system design, however. Based off of the Toyota breaks article, I should probably get worried though.
Yes, many things can go wrong. That doesn't change the fact that an 'emergency stop' is a potential life saver. You simply gloss over the existence of things like the DLR.
anything they do I hope that nothing can simply "stop" the car, but just gradually slow it down, otherwise it would be a HUGE risk for everyone involved of course
and if something like this really must exist PLEASE at least make it sure that nobody more far than 1km (probably a legitimate police officer at the scene) can turn it on..if you are farther than that location coordinates would be more than enough in my view..
