Live data from Hacker News

Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

abc13.com

61–70 of 86 posts

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#61

"used pirated software" So they did not pay for the crack tools they used? Bastards!

Poor thrives didn't k is what they got themselves into. They thought if caught they'd go away for simple auto theft. Now they will probably get charged with hacking (unauthorized use of a computer) under the CFAA and go away for a lot longer.

When I started writing this I was joking but the more you think about it there's a good chance they do get charged under the CFAA.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#62

Earlier quoted context omitted.

I have a great theft deterrent on my truck and Bronco II: Manual transmission. Most people in my area under 25 years old don't have a clue how to start or drive one, and the Bronco won't let you start it without the clutch disengaged (so no push starting). Of course, this varies by location; I'm in the US where manuals are being phased out[1]. When I was growing up it was the other way around; you had to request (and…

Yeah i find it bizarre just how many automatics are in America, here in the UK, the only people who drive automatics are people who have difficulty mastering the skill of standard driving (ie a manual).

Where I'm from, you need to drive manual in driving school and pass the test. It's possible to do automatic only (e.g. for handicapped individuals) but then your license will have a remark forbidding you from driving manual.

A synchronized manual gearbox (not heavy duty vehicle or a museum piece) is really easy to drive. One lesson to learn the basics and another for hill starts is enough. Then it's just a bit of practice.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#63

Earlier quoted context omitted.

The slightly better gas mileage? Though now with CVTs that are computer-controlled, they get better gas mileage than cars with standard/maunual transmissions.

For at least a few years now, even conventional "slushbox" automatics get better mileage than a manual transmission when in the same car. Lower maintenance costs are usually mentioned as an advantage of manual over automatic, but slushboxes have been around for quite a while now. With routine maintenance and average use (meaning no launch control usage or burnouts), both types will last forever.

You can drive a manual very efficiently. My Forester has a display showing instantaneous efficiency. I can increase mileage by a third by paying close attention to it. But that means driving very conservatively, which I'd never do without the display to remind me.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#66
post #23

We presume manufacturers of self-driving cars, or at least their fleet operators, will be liable for their coding mistakes. Why isn't Fiat-Chrysler responsible for the cost of this car?

This mentality is so weird to me. The thief is liable. And I'm happy it is this way, otherwise 3rd party locksmiths and garages wouldn't be able to work on your car.

Interestingly the law strikes a decent balance here. For example, the FTC can sue a company for 'unfair and deceptive business practices'. Exposing cars to insta-theft because you didn't secure your backend database could fall in that category.

Companies do have a duty of care if they are holding the keys to the castle, be it the keys to your car, or keys to your email or financials; they have to take reasonable precautions to protect the data, commensurate with the quantity and sensitivity of the data, and the cost and availability of technology to protect that data.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#68

Earlier quoted context omitted.

There's a cleaner way. You can use a battery terminal disconnect directly on the battery: https://www.amazon.com/dp/B001N729FS/ref=cm_sw_r_cp_api_p1xP... Personally, I drive an old diesel truck and it's as simple as disconnecting the fuel cut-off solenoid wire from the solenoid. Old diesels like mine are terrifically simple and really only have two wires: the starter positive lead and the fuel cut-off lead. The cut-o…

That won't work for a whole pile of cars, especially German ones. They will lose the throttlebody sync and you won't be able to get it out of 'limp' mode without some ODBII reset and re-sync magic. Essentially the ECU will no longer know what position the throttlebody servo is in and to avoid engine damage it won't allow more than 1500 RPM or so.

Huh. Good to know, thanks.

I installed a battery disconnect on my 2006 Jetta when my mechanic couldn't figure out why the battery was draining overnight. There was a short somewhere.

I found someone to clean the sunroof drains (I had cleaned all the drains I could figure out) and the electrical problem went away. Bonus, the notorious Jetta foggy windows on start problem went away too.

Now, I'm hesitant to remove the disconnect switch because I don't know the root cause. But with your pro tip, I guess I need to resolve this one.

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#69

Earlier quoted context omitted.

That won't work for a whole pile of cars, especially German ones. They will lose the throttlebody sync and you won't be able to get it out of 'limp' mode without some ODBII reset and re-sync magic. Essentially the ECU will no longer know what position the throttlebody servo is in and to avoid engine damage it won't allow more than 1500 RPM or so.

Huh. Good to know, thanks. I installed a battery disconnect on my 2006 Jetta when my mechanic couldn't figure out why the battery was draining overnight. There was a short somewhere . I found someone to clean the sunroof drains (I had cleaned all the drains I could figure out) and the electrical problem went away. Bonus, the notorious Jetta foggy windows on start problem went away too. Now, I'm hesitant to remove the…

I learned this the hard way, I ended up driving 55 km to the nearest dealership in 'limp' mode trying to maintain enough speed not to annoy traffic around me. It worked but that was one of the most annoying road trips I ever made.

The weird thing is it does not happen every time you disconnect the battery, but when it does disconnecting it and reconnecting it does not clear the problem. Highly annoying. But a good way to learn new German words ("Drosselklappe...").

Re: Car Thieves Arrested After Using Laptop and Malware to Steal More Than 30 Jeeps

#70
post #45

Earlier quoted context omitted.

> It requires him to break the lock/door/glass to get in first. They pop the hood, apparently. http://www.khou.com/news/crime/high-tech-thieves-crooks-usin... The rest is all 'digital', no further use of force required.

Did you watch the video in that article? It doesn't seem to line up at all with the text of the article, oddly. You see the guy for a moment and then the video skips forward and he's sitting in the Jeep with the alarm going off. The alarm appears to have been going for a good couple of minutes. Wouldn't popping the hood also require breaking a window or otherwise getting in the car to pull the release?

I think they have to have the key already, but still 'blank' That will likely open the door but it would normally raise the alarm, that's why they start under the hood first, to disable that.

After that the procedure would be fairly easy: open the door with the still unlearned key, learn the new key ID to the ECU (takes One handy tip I got from the police after my own car got stolen (a VW transporter camper) was that you should mask off a chunk of the VIN so thieves can't use the VIN to order keys that will fit the car (but that still need to be programmed in the ECU in order to allow a start).

Post reply on HN