WIRED
4 HN mentions · mentioned in 4 months, 2021–2023
5:07 · 4.6M views · Jul 21, 2015
WIRED's Andy Greenberg drives a Jeep on a highway while two hackers take control of it remotely over the internet. They manipulate the car and then cut the engine. The video accompanies the 2015 article on the Jeep Cherokee hack.
HN cites it as the standard precedent for remote car hacking whenever connected or self-driving vehicle security comes up.
4 comments from Hacker News
Addressing your points in order: - Human hackers who run a botnet of infected computers are not able to run many instances of themselves on those computers, so they're not able to parlay one exploit into many exploits. - You might notice I said it would take over hundreds of millions of computers, but only run millions of instances of itself. If 1% of internet-attached computers have a decent GPU, that seems feasible. - If it has found exploits in the software, it seems irrelevant what the interfaces "allow", unless there's some hardware interlock that can't be overridden—but they can drive on the highway, so surely they are able to accelerate at least to 65 mph; seems unlikely that there's a cap. If you mean that it's difficult to work with the software to intelligently make it drive in ways it's designed not to—well, that's why I specified that it would use the software the way it's designed to be used to get onto a main road, and then override it and blindly max out the acceleration; the first part requires minimal understanding of the system, and the second part requires finding a low-level API and using it in an extremely simple way. I suspect a good human programmer with access to the codebase could figure out how to do this within a week; and machines think faster than we do. There was an incident back in 2015 (!) where, according to the description, "Two hackers have developed a tool that can hijack a Jeep over the internet." In the video they were able to mess with t
The camera is what scares them? For me it would be remote take-over. You are experiencing a car accident [1] But seriously, these companies get hacked [2]. Remote control hacks have been done on several cars that aren't even fully self-driving. [3] No idea if anyone has taken full control of a Tesla yet. Their remote entry has been hacked many times but that is a different system. If you could hack this [4] you just need to overcome the 4mph speed limit safety control. [1] - [LINK] [iRobot, just for fun] [2] - [LINK] [Tesla being attacked] [3] - this video [Jeep Cherokee remotely hacked and controlled while driving] [4] - [LINK] [Remote Control Range Rover Sport]
There's been at least one car[1] where hackers gained access to the car electronics through the infotainment system. Not sure about the Tesla, but several other cars[2] have their infotainment connected to the rest of the control systems. So in general, it's not "just" the infotainment system. [1]: this video [2]: [LINK]
The real Goosebumps for devs is cars willing to take driving inputs over their built-in networks from outside the car. this video