Chrysler vehicles can be hacked

n7bsn wrote:


Had a chat with the BIL about this just last weekend (he is a 30+ year air-frame/electronics QA supervisor, with more then one "ata-boy" from the FAA or NTSB). The flight systems on these models are not connected (air-gaped) to the entertainment system the "expert" hacked into.

I sincerely hope your BIL is correct, and that they're completely independent systems. A firewall isn't sufficient. I've seen enough extremely poor IT security decisions to mistrust almost any assertion that a system is "secure". (no reflection on your BIL, who I've never met)

jtallon wrote:
Chrysler? Just the tip of the iceberg.

GAO: Newer aircraft vulnerable to hacking

FBI: Hacker claimed to have taken over flight's engine controls

"Roberts said he knew of vulnerabilities aboard three types of Boeing aircraft and one Airbus model. He hacked into in-flight entertainment systems made by Thales and Panasonic, he told agents, according to the document."

Whether or not the guy was legit or full of******we'll probably never hear definitively. But the problem is potentially a lot bigger than just Chrysler. IT security issues are spreading far outside the data center, into areas where people have very little experience with it.

Had a chat with the BIL about this just last weekend (he is a 30+ year air-frame/electronics QA supervisor, with more then one "ata-boy" from the FAA or NTSB). The flight systems on these models are not connected (air-gaped) to the entertainment system the "expert" hacked into.

went and found that Volvo YouTube...

Volvo Self Stopping Car
autonomous selfdriving


There should be many others as more and more autonomous vehicles
come on line for the folks who think it is a GREAT idea...like the
key-less fob, remote starting, lane change warning ding-ding, self
parallel parking, self reversing into a camp site, etc, etc

Anyone ever pay attention SiFi movie plots ?

Last time checked...over 85% of their IP came to be...Terminator anyone?

The summer interns hired while I was at SunLabs wanted to take over Gates
home when they found out his home was going to be 'PC' based controls...

After telling *NO* and that they will be able to trace it back to Sun...an
arch rival..

Early 90's and still think some of those kids did hack into some of the
servers...before I told them *NO*...

When 'highly integrated' XYZ's came to be...many here touted that against
others who did NOT like 'highly integrated'...mainly trailer brake controllers

The steering wheel is no longer directly connected to the steering box on
many and going to be most vehicles today. The steering wheel is connected
directly to a potentiometer or some such position sensor (think El Cheapo)

Another 'fly by wire'. Can't wait, or has it been done already...for the OEMs
to 'highly integrate' steering into their anti-sway and traction control system


Anti-Sway & traction control are 'highly integrated' with the ABS system.
Along with the future booster...where your brake pedal is no longer going to
be connected directly to the MC piston rod

Another 'fly by wire'...


Autonomous test vehicles driving all over my area (SF Bayarea) has had
many accidents, but this had the first human injury accident. I'm not a fan
of self driving vehicles just yet. Too much to be explored and 'fixed'

Search 'Volvo automated accident' where during a self parking demo it plowed
into the news folks. Think it broke that one guy's leg who was thrown onto the hood

PS...no Internet needed...just WiFi/BlueTooth/etc to do whatever
you wish to any computerized 'thing'...and...already there with
the keyless fobs...remote start...etc, etc, etc

PPS...LEO kill switches are in testing...moving out of Alpha and
into Beta (live on street)...no more pursuit of 'new' vehicles...just
push the 'kill button'...am assuming that they have to either 'aim'
it or somehow tell 'only "that" vehicle'...

They could safely make the Internet available if they install a separate system for Internet access. And make the engine control system as a separate no Internet access system, you would need physical access to make changes to that engine system.

Maybe they'll make a sensible decision and no longer have a vehicle with access to the internet. Naaaah, that's too sensible. Shoot, my grandson's car has an onboard hotspot. Talk about useless geegaws.

They'll have some trouble with our vehicles: the newest vehicle we have is a 2004, and that's a motorcycle. :)

Chrysler? Just the tip of the iceberg.

GAO: Newer aircraft vulnerable to hacking

FBI: Hacker claimed to have taken over flight's engine controls

"Roberts said he knew of vulnerabilities aboard three types of Boeing aircraft and one Airbus model. He hacked into in-flight entertainment systems made by Thales and Panasonic, he told agents, according to the document."

Whether or not the guy was legit or full of******we'll probably never hear definitively. But the problem is potentially a lot bigger than just Chrysler. IT security issues are spreading far outside the data center, into areas where people have very little experience with it.

Suddenly liking my 1972 GMC Sierra Camper Special with Muncie 4 speed stump puller behind a good old small block that is conventionally aspirated and fired... yup I am.

n7bsn wrote:
While the demonstration was done on a Jeep, the "hack" would basically work on any Chrysler product with the same tech.
The concept follows for ANY vehicle where the ECU is connected to the consumer electronics, where the WiFi and Cellphone connections are.
The only way to ensure there is no way to "hack" the system is to not have the ECU connected to the CE, not even firewalled, air-gapped. No connection

Precisely. It's not rocket science. There is no need to have control systems and infotainment on the same bus.

And this is a problem for who?

BTW, this can be done with almost any new car from any manuf.