Hackers Remotely Attack a Jeep on the Highway
1–10 of 640 posts
Re: Hackers Remotely Attack a Jeep on the Highway
#2"...whether the Internet-connected computers were properly isolated from critical driving systems, and whether those critical systems had “cyberphysical” components—whether digital commands could trigger physical actions like turning the wheel or activating brakes."
Shouldn't this be the most basic design consideration for any company building autos? The liability from litigation should bankrupt any company that doesn't prioritize this.
Re: Hackers Remotely Attack a Jeep on the Highway
#3"...whether the Internet-connected computers were properly isolated from critical driving systems, and whether those critical systems had “cyberphysical” components—whether digital commands could trigger physical actions like turning the wheel or activating brakes." Shouldn't this be the most basic design consideration for any company building autos? The liability from litigation should bankrupt any company that does…
Hell i thought an airgap would have been the first thing to occur. Why would you need wireless access to non entertainment systems?
It honestly beggars belief in my opinion.
Re: Hackers Remotely Attack a Jeep on the Highway
#4So, it's becoming abundantly clear that vehicle companies (autos, jets...) have approximately zero knowledge how to hire software engineers. Presumably they're somewhat more successful hiring mechanical engineers because that's always been their "thing".
It's all well and good for us to chuckle at the terrifying software/systems decisions being made by these teams, but how do we address the root of the problem? It's very clear that entire meta-categories of horrific errors are being made at a very fundamental level. Is this a problem of outsourcing? Of confusing "coders" with engineers?
And how do we solve it? Shame the software team such that they can never get hired in a serious role again anywhere? Professionalize the job into a strictly licensed regime like other branches of engineering?
Whenever I read these types of articles, my main thought has always been, "so who, the hell, wrote the code?" It'd be interesting to know their story.
Re: Hackers Remotely Attack a Jeep on the Highway
#5So, it's becoming abundantly clear that vehicle companies (autos, jets...) have approximately zero knowledge how to hire software engineers. Presumably they're somewhat more successful hiring mechanical engineers because that's always been their "thing". It's all well and good for us to chuckle at the terrifying software/systems decisions being made by these teams, but how do we address the root of the problem? It's…
I imagine a not terribly experienced new team being told to do connected stuff in a car, not really understanding security and having ridiculous demands thrown at them as the manufacturer drools about getting subscription revenue from every car. But would be nice to have an inside story.
Re: Hackers Remotely Attack a Jeep on the Highway
#6So, it's becoming abundantly clear that vehicle companies (autos, jets...) have approximately zero knowledge how to hire software engineers. Presumably they're somewhat more successful hiring mechanical engineers because that's always been their "thing". It's all well and good for us to chuckle at the terrifying software/systems decisions being made by these teams, but how do we address the root of the problem? It's…
Are you pointing to the stellar security record of the software industry here?
Re: Hackers Remotely Attack a Jeep on the Highway
#7"...whether the Internet-connected computers were properly isolated from critical driving systems, and whether those critical systems had “cyberphysical” components—whether digital commands could trigger physical actions like turning the wheel or activating brakes." Shouldn't this be the most basic design consideration for any company building autos? The liability from litigation should bankrupt any company that does…
Hell i thought an airgap would have been the first thing to occur. Why would you need wireless access to non entertainment systems? It honestly beggars belief in my opinion.
Remote start via cell phone is a very marketable feature.
Once you get there, doing things like turning on the heat or AC are nice tack ons.
Re: Hackers Remotely Attack a Jeep on the Highway
#8"...whether the Internet-connected computers were properly isolated from critical driving systems, and whether those critical systems had “cyberphysical” components—whether digital commands could trigger physical actions like turning the wheel or activating brakes." Shouldn't this be the most basic design consideration for any company building autos? The liability from litigation should bankrupt any company that does…
Hell i thought an airgap would have been the first thing to occur. Why would you need wireless access to non entertainment systems? It honestly beggars belief in my opinion.
wireless updates are cheaper than recalls.
Re: Hackers Remotely Attack a Jeep on the Highway
#9Earlier quoted context omitted.
Hell i thought an airgap would have been the first thing to occur. Why would you need wireless access to non entertainment systems? It honestly beggars belief in my opinion.
Remote start via cell phone is a very marketable feature. Once you get there, doing things like turning on the heat or AC are nice tack ons.
Remote start I can see the reasoning for, but remote stop just seems to be asking for trouble.
Re: Hackers Remotely Attack a Jeep on the Highway
#10So, it's becoming abundantly clear that vehicle companies (autos, jets...) have approximately zero knowledge how to hire software engineers. Presumably they're somewhat more successful hiring mechanical engineers because that's always been their "thing". It's all well and good for us to chuckle at the terrifying software/systems decisions being made by these teams, but how do we address the root of the problem? It's…
The same shift to focus on security is happening with medical devices and the FDA. Maybe that's one place to look for success and failure.