Car-hacking expert urges Jeep owners to install security update

  • 21 July 2015
  • 2 replies
  • 831 views

Userlevel 7
Badge +54
Graham Cluley | July 21, 2015
 
Jeep owners - you don't want someone having "unlawful access" to your vehicle's systems, right?
 
Of course not. After all, that sounds like it would be bad news. In the worst cases it might mean they could open your card doors, or mess with your steering.
 
Which is why you should consider installing a security update that Jeep has issued for cars fitted with a model RA3 or model RA4 radio/navigation system.
 
 

 
Full Article

2 replies

Userlevel 7
The following article is a update:
************************************

Jeep breach: Scared? You should be, it could be you next.

BY: 24 Jul 2015 at 12:22, John Leyden
 
Other vehicles may be at risk from hacking following the Jeep Cherokee incident, according to one of the two researchers who pioneered the spectacular auto exploit.
Renowned car security researchers Charlie Miller and Chris Valasek remotely hacked a Jeep Cherokee over a mobile network and found a way to control critical systems, after gaining entry through its connected infotainment system, Uconnect.
The duo previously hacked a Toyota Prius and a Ford Escape, although those hacks relied on taking over a vehicle's systems by plugging directly into a car's network via a port under the dashboard.
The latest hack allowed the duo to take over a Jeep from 10 miles away, meaning they could take over, turn on the AC, blast music, disable the transmission and even disable the brakes. The researchers demonstrated how skilled hackers might be able to hack into vulnerable cars simply by knowing the the vehicle's IP address.
The researchers previewed an upcoming Black Hat talk by demoing the hack to Wired journalist Andy Greenberg who describes what it was like to become a passenger in the Jeep car he was driving after the hackers hijacked it.
The Jeep ended up in a ditch after its brakes were remotely disabled at the climax of the hack.
 
full article
Userlevel 7
The following article is a update:
************************************

Jeep Hacker Says IoT Security a Complex Issue.

  By Jeffrey Burt  |  Posted 2015-09-10
 
 At the Security of Things event, Chris Valasek says the responsibility for securing IoT devices rests with all those involved in building the systems.
CAMBRIDGE, Mass.—Chris Valasek and Charlie Miller made headlines last month when they demonstrated at two security conferences how they were able to hack into a moving Jeep Cherokee, remotely taking control of the vehicle. 
Their hacks led to Fiat Chrysler Automobiles to recall 1.4 million vehicles to fix the vulnerability, and put an even greater spotlight on the complex issue of security and the Internet of things (IoT). During a keynote address at the second annual Security of Things conference here Sept. 10, Valasek used the work he and Miller did to talk about the challenges presented by the need to secure the tens of billions of devices that will make up IoT over the next several years, the responsibility that all players involved in the development of a connected product have in addressing security and the need for more security professionals to test these products. 
full article

Reply