PDA

View Full Version : New car, 13 terrain denali. Modern car security risks.



Odinson
08-21-2013, 12:10 PM
Hey

Wanted to post pics of my newest car. I bought a 2013 Terrain Denali.

After going over it quite a bit two things are worth mentioning.

#1 Before you come down to hard on it, the 2013 has exactly the same performance specs as a stock marauder. 3.6L has the same acceleration, same 0-60, same 1/4 same skidpad, same braking distance. Of course they are already pretty tweaked and nowhere near as upgradable IMO. But it's lots of fun to baffle other motorists on the merge.

35506
35507

#2 In my quest to remove Onstar from the vehicle I did alot of research into automotive security on modern cars. It's really really bad. Modern cars are going to get viruses, and in the worst case a fleet or even brand (gm, ford, honda, whatever) wide terrorist attack is not out of the question. ANY car with a built in telematics system (onstar for example) is at risk of total instantaneous remote control. Non internet/telematics cars are still at risk from sabotage from bluetooth phones, DVD entertainment systems, and USB keys. It's the CAN bus that replaces bundles of wires (thick wiring harnesses). and connects all the computers in your car together. It's completely insecure. All brands of cars!!!!!!

This was pretty shocking to me. :eek: In the case of our Marauders, I think that if you shut your key off, that will remove a non programmable voltage needed to keep the engine running. Then you can guide the car to the side of the road without the engine. Not so in modern cars. Own the right computer and key will be ignored. Your car can run amuck with NO way to stop it. No throttle, no brakes, and depending on the model and attack, no steering.

I would strongly recommend that folks install battery solenoids between your battery and your main power for 2009+ vehicles with a kill switch accessible from the drivers seat.

Naturally I welcome criticism of this recommendation, but if it's a picture of a tin foil hat I will come back hard. :censor: This is not a joke and I can back it up.

Here is a paper I wrote specifically about Onstar.
http://www.scribd.com/doc/159011818/Onstar-national-security-threat

Another reason to love your Marauder and never let it go!

Odinson
08-21-2013, 12:36 PM
It had turned out that I pieced together what DARPA Had already determined about a year before. After writing the above I found this talk.

http://www.youtube.com/watch?feature=player_embedded&v=3D6jxBDy8k8

That lead to DARPA funding this WAY underreported study. IMO they are trying fuel consumer outrage to let the market solve the problem, but the press is downplaying it. This came out about 2 weeks ago!

http://www.youtube.com/watch?feature=player_embedded&v=oqe6S6m73Zw

Odinson
08-22-2013, 08:42 AM
BTW if you are interested here is the details of how they broke into and controlled the cars. The example cars were that Prius and a Ford Escape, but it could have been ANY car.

http://blog.ioactive.com/2013/08/car-hacking-content.html

How....
http://illmatics.com/car_hacking.pdf

Code...
http://illmatics.com/content.zip

Surprise Ford 'played down' the research. LOL

http://www.darkreading.com/attacks-breaches/car-hackers-release-tools/240159477/

MyBlackBeasts
08-23-2013, 09:36 PM
Thanks for the info.

When steer by wire & brake by wire were 1st being discussed as concepts I stated I would never own one.

I was able to tolerate drive by wire as you could always shut engine off, throw trans out of gear or brake to deal with acceleration technical malfunction.

Odinson
08-27-2013, 08:11 AM
Thanks for the info.

When steer by wire & brake by wire were 1st being discussed as concepts I stated I would never own one.

I was able to tolerate drive by wire as you could always shut engine off, throw trans out of gear or brake to deal with acceleration technical malfunction.

Exactly! At least retain the ability to kill DC power and limp it off the road.