Category Archives: car hacking

Open source cybersecurity framework for the automotive industry

Posted on by

A consortium of researchers announced the development of a universal, free, and open source framework to protect wireless software updates in vehicles. The team issued a challenge to security experts everywhere to try to find vulnerabilities before it is adopted by the automotive industry. The new solution, called Uptane, evolves the widely used TUF (The Update Framework) to secure software updates. Uptane is a collaboration of NYU Tandon, the University of Michigan Transport Research Institute, … More → Continue reading Open source cybersecurity framework for the automotive industry→

One Hundred Weeks of Legal Car Hacking

Posted on by

There is a scene in the movie “Magic Mike” where the lead character — a male stripper — explains to a room of women the laws against having physical contact with a performer. Then he intones, “… but I see a lot of lawbreakers up in this house.”

We know if we could look out through the Web browser, we could say the same thing. There’s a lot of gray zone activities considered commonplace. Have you ever ripped a CD or DVD to take with your on your phone? Gray; we won’t judge. A lot of the legal issues involved …read more

Continue reading One Hundred Weeks of Legal Car Hacking→

Tesla introduces code signing to harden their cars’ security

Posted on by

When researchers from Tencent’s Keen Security Lab discovered that they were able to leverage vulnerabilities to remotely hijack Tesla cars, they reported the issues to the automotive company and rushed them into implementing a security feature they have been working on for a while: code signing. The vulnerabilities were several, including one in Tesla S’ browser that would allow attackers to direct users towards a website hosting the malicious payload, and a privilege elevation flaw … More → Continue reading Tesla introduces code signing to harden their cars’ security→

Chinese researchers hijack Tesla cars from afar

Posted on by

Tesla car owners are urged to update their car’s firmware to the latest version available, as it fixes security vulnerabilities that can be exploited remotely to take control of the car’s brakes and other, less critical components. The vulnerabilities were discovered by researchers from Tencent’s Keen Security Lab, and responsibly disclosed to Tesla. The company’s Product Security Team confirmed them, and implemented fixes in the latest version of the firmware. Tencent’s researchers understandably didn’t reveal … More → Continue reading Chinese researchers hijack Tesla cars from afar→

Hackers take Remote Control of Tesla’s Brakes and Door locks from 12 Miles Away

Posted on by

Next time when you find yourself hooked up behind the wheel, make sure your car is actually in your control.

Hackers can remotely hijack your car and even control its brakes from 12 miles away.

Car hacking is a hot topic.

Today many automobiles comp… Continue reading Hackers take Remote Control of Tesla’s Brakes and Door locks from 12 Miles Away→

Vulnerabilities found in cars connected to smartphones

Posted on by

Many of today’s automobiles leave the factory with secret passengers: prototype software features that are disabled but that can be unlocked by clever drivers. In what is believed to be the first comprehensive security analysis of its kind, Damon McCoy, an assistant professor of computer science and engineering at the NYU Tandon School of Engineering, and a group of students at George Mason University found vulnerabilities in MirrorLink, a system of rules that allow vehicles … More → Continue reading Vulnerabilities found in cars connected to smartphones→

Automotive security: How safe is a next-generation car?

Posted on by

The vehicles we drive are becoming increasingly connected through a variety of technologies. Features such as keyless entry and self-diagnostics are becoming commonplace. Unfortunately, they can also introduce IT security issues. When Chris Valasek and Charlie Miller demonstrated at Black Hat USA 2015 how they can remotely exploit vulnerabilities in Chrysler’s 2014 Jeep Cherokee, many thought it was interesting, but not a widespread problem. Turns out it was just the tip of the iceberg. Time … More → Continue reading Automotive security: How safe is a next-generation car?→