Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 
769 posts

Ultimate Geek
+1 received by user: 111


  # 1351762 25-Jul-2015 22:55
Send private message

gzt: Jeep responds. Software update available:

http://www.forbes.com/sites/thomasbrewster/2015/07/21/jeep-vulnerability-fixed/

The researchers believe the issue affects any Chrysler Fiat with Uconnect manufactured late 2013 thru 2014 to early 2015.


How is the update actually delivered?



gzt

10815 posts

Uber Geek
+1 received by user: 1810


  # 1351771 25-Jul-2015 23:59
Send private message

Benokobi: How is the update actually delivered?

Official recall issued today:

http://www.media.chrysler.com/newsrelease.do?id=16849&mid=

The firmware update will be provided to customers on USB stick.

 
 
 
 


gzt

10815 posts

Uber Geek
+1 received by user: 1810


  # 1351778 26-Jul-2015 00:41
Send private message

BBC is reporting a UK security firm have demonstrated a hack via the entertainment system radio using a 'fake' commercial radio station.

http://www.bbc.com/news/technology-33622298



431 posts

Ultimate Geek
+1 received by user: 44


  # 1352470 27-Jul-2015 12:23
Send private message

gzt: BBC is reporting a UK security firm have demonstrated a hack via the entertainment system radio using a 'fake' commercial radio station.

http://www.bbc.com/news/technology-33622298


I read the article WOW that's a new and disturbing twist, heightens the need to get security sorted sooner than later. As we in NZ I don't believe use DAB we maybe safe that said are the tuners in new cars DAB enabled, if so the question would be could a fake station be setup that could compromise vehicles in bulk.  Could the DAB broadcast run silent with no music just data ?.

I know it could be seen as a tin foil hat kind of paranoia but we live in strange times, it would be good if a light is put on the possibilities here I think.

2091 posts

Uber Geek
+1 received by user: 849


  # 1352519 27-Jul-2015 13:15
Send private message

So in summary:

The Car entertainment system has full control over the car's computer and all systems and will execute tasks received from a DAB broadcast unathenticated.

Wow.

Why not just provide a publicly accessible web interface to engine systems on the internet for each car you sell?



22259 posts

Uber Geek
+1 received by user: 4784

Trusted
Subscriber

  # 1352642 27-Jul-2015 15:30
Send private message

The car radio is on at least one of the CAN busses so it can get stearing wheel controls, and sometimes more so it can also deal with seat occupancy and if the headlights are on for dimming, for the nav system in it to get speed and direction etc.

Once the radio is compromised, it can then have full access to those can busses and screw with devices on them. Most things on the bus will have modes to relay commands to other busses on them, that is how you can get to all the systems thru the OBDC2 port, which typically only connects to a couple of them. So yes, the general purpose PC in the entertainment system in those cars can get pretty much to anything in the car.




Richard rich.ms

gzt

10815 posts

Uber Geek
+1 received by user: 1810


# 1352857 27-Jul-2015 19:59
Send private message

wasabi2k: Why not just provide a publicly accessible web interface to engine systems on the internet for each car you sell?

Have I got a deal for you!! uConnect!

http://www.driveuconnect.com/features/uconnect_access/

 
 
 
 


JWR

757 posts

Ultimate Geek
+1 received by user: 238


  # 1352871 27-Jul-2015 20:15

gzt:
Benokobi: How is the update actually delivered?

Official recall issued today:

http://www.media.chrysler.com/newsrelease.do?id=16849&mid=

The firmware update will be provided to customers on USB stick.


Thanks God for that. (and I don't mean God)

A totally secure medium.

Next hack.. days away?

Of course the real insecurity is the hardware design.

No amount of patching can fix that.

Mad Scientist
20461 posts

Uber Geek
+1 received by user: 2790

Trusted
Lifetime subscriber

  # 1352915 27-Jul-2015 21:19
Send private message

one question. does huawei supply any of the parts?




Swype on iOS is detrimental to accurate typing. Apologies in advance.


JWR

757 posts

Ultimate Geek
+1 received by user: 238


  # 1352949 27-Jul-2015 22:48

joker97: one question. does huawei supply any of the parts?


Why would that matter?


1 | 2 | 3 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.