Live data from Hacker News

Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

abc13.com

21–30 of 86 posts

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#21

If your poor, like myself, and want to slow down a car thief, put in a kill switch. Run the proper gague wire from the primary on the coil to a switch in the cab. The primary wires are the small wires on the coil. (I can't think of any reason the ECU would throw a trouble code.) It gets more complicated if you have a separate distributor running to each cylinder, but there's always a point in the electrical system yo…

Yes, my elder brother did it ~20 years ago. But isn't it the first thing a skilled car thief is looking for when a car doesn't start?

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#23

We presume manufacturers of self-driving cars, or at least their fleet operators, will be liable for their coding mistakes. Why isn't Fiat-Chrysler responsible for the cost of this car?

This mentality is so weird to me. The thief is liable. And I'm happy it is this way, otherwise 3rd party locksmiths and garages wouldn't be able to work on your car.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#24
Untill the key generation scheme is cracked and it turns out to be md5 of the vin and use the last 10 keys (a la how wpa keys are generated for modems); now all you need is a smartphone, blank key and programmer and all cars of that brand can be easily stolen.

But it could be worse; BMW had a alarm systeem that would not go off if one of the front Windows were smashed; programmer hooked to the cambus allowed you to create a working key and drive off in under a minute...

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#25

If your poor, like myself, and want to slow down a car thief, put in a kill switch. Run the proper gague wire from the primary on the coil to a switch in the cab. The primary wires are the small wires on the coil. (I can't think of any reason the ECU would throw a trouble code.) It gets more complicated if you have a separate distributor running to each cylinder, but there's always a point in the electrical system yo…

There's a cleaner way. You can use a battery terminal disconnect directly on the battery: https://www.amazon.com/dp/B001N729FS/ref=cm_sw_r_cp_api_p1xP... Personally, I drive an old diesel truck and it's as simple as disconnecting the fuel cut-off solenoid wire from the solenoid. Old diesels like mine are terrifically simple and really only have two wires: the starter positive lead and the fuel cut-off lead. The cut-o…

Please don't do this if your car has oxygen sensors, a catalytic converter or fuel injectors (basically all cars 1980+)

Why? Besides polluting more you're going to reset the car's ECU and it takes a few drive cycles in different conditions to properly tune the engine.

There are so many things that can affect the tuning, engine wear, fuel quality even the barometric pressure. If the car can't learn that (because it's designed to reset on power loss) you will probably be running a rich A/F mixture that can foul your O2 sensors and 3-way cat.

Install an alarm or get a car immobilizer. There is a RFID immobilizer on ebay for less than 10 bucks..

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#27
post #13

More details from this article: http://www.houstonchronicle.com/news/houston-texas/houston/a... Quote: Berj Alexanian, a spokesman with Fiat Chrysler Automobiles, said officials know how the Jeep Wrangler was stolen. According to Alexanian, the thief broke into the vehicle and used a laptop to enter its VIN number in order to access the Chrysler database. Dealerships, repair facilities and locksmiths are usually the…

So they had unauthorized access to the Chrysler servers. Possibly via a stolen laptop. Seems too easy.

Do they not have equivalent of 2FA? What if these were nukes?

"We are terribly sorry, Mister President. We did not expect them to steal the launch codes from the database. We will provide asylum for what's left of your country."

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#28
post #27
post #13

Earlier quoted context omitted.

So they had unauthorized access to the Chrysler servers. Possibly via a stolen laptop. Seems too easy.

Do they not have equivalent of 2FA? What if these were nukes? "We are terribly sorry, Mister President. We did not expect them to steal the launch codes from the database. We will provide asylum for what's left of your country."

Why would Chrysler have nukes?

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#29
post #28
post #27

Earlier quoted context omitted.

Do they not have equivalent of 2FA? What if these were nukes? "We are terribly sorry, Mister President. We did not expect them to steal the launch codes from the database. We will provide asylum for what's left of your country."

Why would Chrysler have nukes?

My first laugh of the day.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#30

If your poor, like myself, and want to slow down a car thief, put in a kill switch. Run the proper gague wire from the primary on the coil to a switch in the cab. The primary wires are the small wires on the coil. (I can't think of any reason the ECU would throw a trouble code.) It gets more complicated if you have a separate distributor running to each cylinder, but there's always a point in the electrical system yo…

Funny you mention old Japanese cars, as mine was stolen (and subsequently found) just a few days ago.

90's era Japanese cars are notoriously easy to steal, and the only thing that stopped them was the immobiliser kicking back on. When they initially took it, the immobiliser was off thanks to a mistake on my part, but it automatically re-activates when the car is turned off.

To get it home after it was found, I actually started it with a plastic spoon thanks to the minor "productivity hacks" they had applied to it. Keyless start!

The window and door were fine, because all you need to get into the door is a coat hanger down the window sil.

Given enough time, I suspect they would have gotten through the immobiliser fairly easily, and I honestly don't think a kill switch would slow them down much either as to be convenient, they need to be in the cabin.

My last car had a kill switch, and it was a big red button underneath the steering column. They're going to figure it out, but it might slow them down enough to consider giving up.

Car alarms are next to useless, no one cares or checks, but a good immobiliser will at least push it past the "easy grab" realm of opportunity. Unfortunately not until after they've broken in, taken your stuff and broken your key barrel though.

Post reply on HN