In July of 2015, two hackers named Charlie Miller and Chris Valasek shocked the tech and automotive worlds by successfully hacking into a Chrysler Jeep Cherokee and taking control of the vehicle remotely. The hack was done with the knowledge and cooperation of the driver as a demonstration of the dangers associated with smart technology being integrated into automobiles. In the aftermath of the published report, Chrysler has announced a recall of over one million vehicles, and automakers are scrambling to reduce security vulnerabilities in their own automotive systems.
While this type of attack has yet to occur on any wide-scale basis, it is important to remain aware of the risks and know what you can do to help reduce them.
The Hack
Anything that utilizes Wi-Fi technology has the potential to be hacked and controlled without your knowledge or permission. Modern vehicles are increasingly implementing Wi-Fi technology as part of their entertainment and GPS systems. The integration of this technology into your vehicle allows for greater interactivity and convenience, but these advantages almost always make a sacrifice in security.
In the case of the Jeep Cherokee hack, Miller and Valasek exploited a system called Uconnect that integrates the car’s entertainment system with wireless phone call capability, a Wi-Fi hotspot and navigational features. The system’s cellular connection enables the hackers to take control of the vehicle from anywhere in the country once they know the car’s IP address. The IP address also allows the hackers to track the vehicle’s movements and to implant their own software that gives them greater control of the car.
(Chrysler has already released a security patch to help fix this vulnerability that can either be downloaded for free to a USB drive or professionally installed at no charge.)
Once they had control of the Jeep, the remote capabilities were endless. As part of the demonstration, the hackers ran the windshield wipers, turned up the radio, shut off the transmission and disabled the brakes. This was all done carefully to prevent any danger to the driver, a reporter for Wired. The hackers stated that they could even control the vehicle’s steering, but only when the vehicle was in reverse for the time being. As cars become more like smart phones, they become more open to this type of attack.
Precedence
Miller and Valasek had previously taken control of vehicles by plugging their laptop right into the control panel of the car. That feat was initially ignored by automotive companies for the most part, because it was believed that the same feat could not be achieved remotely. Miller and Valasek took that as a challenge, and they immediately started researching how to hack into vehicles from a distance. To their credit, they have been in contact with automotive companies during the entire process to help facilitate new security protocols that can help prevent this type of remote control.
The most severe case of remote car hacking occurred in 2010 when a former Texas Auto Center employee maliciously uses employee privileges to shut down over 100 vehicles. The cars had systems installed on them that allowed the dealership to shut off the car in the result of delinquent payment.
What You Can Do
If your car is an older model that does not have any of the more recent features involving GPS or Wi-Fi technology, there is no risk of your car being hacked. However, if your car does have these features, it is imperative to make sure that your car has any available security patches. If you are not sure, contact the car company or local dealership. Car companies are providing security patches for free as they develop them.
If you start noticing your car behaving oddly in any way, get it checked out immediately. This is especially true if the malfunction involves your vehicle’s GPS system or any vital safety equipment like brakes. It is important not to panic about the possibility of car hacking. However, it is always better to be safe than sorry.
Car hacking is a crime that is still in its infancy. The problem is that hacking technology typically evolves faster than the technology to defend against it. Therefore, cars utilizing Wi-Fi technology are likely to remain vulnerable for several years as car companies implement more security options. Consider purchasing vehicles that do not have this technology installed for the time being until car companies can guarantee safety with more confidence.
SHARE