Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hackers Remotely Attack a Jeep on the Highway

wired.com

Post reply on HN
Print view View original

501–510 of 640 posts

Re: Hackers Remotely Attack a Jeep on the Highway

#501

Post by monocasa »

kbenson wrote: post #429
baakss wrote: post #333

Earlier quoted context omitted.

>I exercised my judgement and decided to phone the local Highway Patrol office. That was rash. You called the police within an hour of reading this article? You didn't think it's possible the writer is embellishing or exaggerating the danger he was in here? As of right now, everything they've done has been done in good faith to try to point out the need for extra security. Also, if they get arrested, even convicted o…

I suggest you view the video[1] that bengali3 linked. 1: http://dp8hsntg6do36.cloudfront.net/55ad80d461646d4db7000005...

The journalist is lying. Carefully look at the tachometer when he says that he can't accelerate, it's running at normal speed.

Re: Hackers Remotely Attack a Jeep on the Highway

#502

Post by maxerickson »

yellowapple wrote: post #426
SonicSoul wrote: post #364

Earlier quoted context omitted.

That's borderline like saying using crash test dummies is useless because it's not realistic enough for car manufacturers to take it seriously

The actions - according to the article - of auto manufacturers in response to prior more-controlled tests is exactly equivalent to that. The manufacturers basically said "hey, thanks for showing us this crash-test footage that shows our vehicles are literal fucking coffins on wheels; we don't really care", leaving the researchers with no results after taking more "sane" measures. Researchers perform controlled experi…

Researchers opt for more damning (though less controlled) experiments to further prove their point, and now they're suddenly the bad guys here.

Much of the commentary here focuses on the recklessness of the highway test and doesn't weigh in too heavily on who the bad guys are.

I think people mostly find the idea of remotely exploitable and controllable cars so terrible that there isn't anything to discuss about that aspect of it, it's nearly universally considered unacceptable (hence the epic thread about the side issue).

Maybe try reading the comments without imputing a side that the writer is taking.

Re: Hackers Remotely Attack a Jeep on the Highway

#503

Post by sixothree »

innguest wrote: post #166

If Myth Busters tested some wacky car on a public road at 70mph without telling anyone, we'd all be freaking out. But because they were "researchers" (i.e. the same tribe as most leftist people here) from a university (leftist church) then they get a pass and all sorts of justification for why what they did was OK. EDIT: Leftists go by label. They will heart any "researcher" thinking they must be their peer in their…

Don't worry. I'm sure there's a free-market solution out there somewhere.

Re: Hackers Remotely Attack a Jeep on the Highway

#504

Post by downandout »

tombrossman wrote: post #12

Some questions for the researchers, or anyone else who thinks this was okay: 1) Were public roadways and speeds of 70mph absolutely necessary to demo this? 2) What was the plan if the trucker approaching at 70mph hadn't seen the Jeep stalled early and had to swerve or panic stop, possibly crashing and injuring themselves or others? 3) Anyone notify the Missouri State Highway Patrol about this? They may be contacting…

> I've just phoned 'Troop C' of the Highway Patrol at their main number, +1-636-300-2800 and they seemed pretty keen to follow up. The fact that the vehicle was disabled where there was no shoulder, was impeding traffic, and the demo not cleared with them in advance has them concerned. I'm all for testing exploits and security research, but this isn't the right way to do it. And to film it and post it to a high traffic site is nuts.

WTF is wrong with you?

Re: Hackers Remotely Attack a Jeep on the Highway

#505

Post by nulltype »

radnor wrote: post #445
rhino369 wrote: post #419

Earlier quoted context omitted.

The ones that turned out to be mostly old people hitting the gas instead of the accelerator?

Yeah, no. Check this out: http://www.edn.com/design/automotive/4423428/Toyota-s-killer...

Interesting! How does Toyota's code compare to other car manufacturers?

Re: Hackers Remotely Attack a Jeep on the Highway

#506

Post by jameshart »

yellowapple wrote: post #475
profinger wrote: post #438

Earlier quoted context omitted.

It's not about the fact that the Jeep was hackable it's about the fact that the demonstration was done on a crowded highway with civilians around.

It's also about the fact that more "reasonable" tests by these researchers were ignored by manufacturers. Hundreds of thousands of potential deaths at the hands of vulnerable vehicles versus maybe a dented bumper or two. I'll take the latter, please.

You're repeatedly posting on this thread that "the manufacturers" have ignored the researchers' previous tests.

That doesn't seem to be true; Chrysler (the singular manufacturer involved) have, after being alerted to the hack prior to this report, already issued a patch. The researchers are practicing responsible disclosure, have the co-operation of the manufacturer, and are going public with the details at Blackhat next month.

This Wired piece is NOT part of that responsible vulnerability disclosure, it's a teaser to hype up their blackhat talk. It was not necessary to get this piece in Wired to save "hundreds of thousands" of lives. I guess you could argue that the vividness of this imagery will encourage people to follow through on getting their Jeeps patched, so there's that, I suppose.

Since you've repeatedly made this claim, do you have a link to back up the assertion that there are manufacturers who were ignoring this research who will now pay attention because of the crazy stunt Wired pulled?

Re: Hackers Remotely Attack a Jeep on the Highway

#507

Post by yellowapple »

jameshart wrote: post #506
yellowapple wrote: post #475

Earlier quoted context omitted.

It's also about the fact that more "reasonable" tests by these researchers were ignored by manufacturers. Hundreds of thousands of potential deaths at the hands of vulnerable vehicles versus maybe a dented bumper or two. I'll take the latter, please.

You're repeatedly posting on this thread that "the manufacturers" have ignored the researchers' previous tests. That doesn't seem to be true; Chrysler (the singular manufacturer involved) have, after being alerted to the hack prior to this report, already issued a patch. The researchers are practicing responsible disclosure, have the co-operation of the manufacturer, and are going public with the details at Blackhat…

My remarks were strictly based on the claims of the article. Nothing more, nothing less. The article claims that the researchers performed prior tests, and that said tests were dismissed by auto manufacturers. If we're going to take one component at face value (the idea of the reporter putting others in danger), it would be unfair to not extend the same courtesy to the rest of the article.

Re: Hackers Remotely Attack a Jeep on the Highway

#508

Post by oh_sigh »

stevendhansen wrote: post #95
tombrossman wrote: post #12

Some questions for the researchers, or anyone else who thinks this was okay: 1) Were public roadways and speeds of 70mph absolutely necessary to demo this? 2) What was the plan if the trucker approaching at 70mph hadn't seen the Jeep stalled early and had to swerve or panic stop, possibly crashing and injuring themselves or others? 3) Anyone notify the Missouri State Highway Patrol about this? They may be contacting…

Calling the police on security researchers...I honestly cannot believe this is considered acceptable behavior. A much less aggressive (and thoughtful) move would be to contact the researchers directly. Wow. Back to the article, I think that this type of exploit will become more and more common as vehicles become more connected and automated. We need to know that we can trust the software and firmware running on the d…

The security researches behaved irresponsibly by performing this demo on a public highway, especially one with no shoulder. They could have driven around a private track just as easily. Performing the test on a public road endangers the journalist, other drivers, emergency assistance personnel, etc.

Re: Hackers Remotely Attack a Jeep on the Highway

#509

Post by joeldg »

tombrossman wrote: post #12

Some questions for the researchers, or anyone else who thinks this was okay: 1) Were public roadways and speeds of 70mph absolutely necessary to demo this? 2) What was the plan if the trucker approaching at 70mph hadn't seen the Jeep stalled early and had to swerve or panic stop, possibly crashing and injuring themselves or others? 3) Anyone notify the Missouri State Highway Patrol about this? They may be contacting…

what a fucking retard you are

Re: Hackers Remotely Attack a Jeep on the Highway

#510

Post by [deleted] »

tombrossman wrote: post #12

Some questions for the researchers, or anyone else who thinks this was okay: 1) Were public roadways and speeds of 70mph absolutely necessary to demo this? 2) What was the plan if the trucker approaching at 70mph hadn't seen the Jeep stalled early and had to swerve or panic stop, possibly crashing and injuring themselves or others? 3) Anyone notify the Missouri State Highway Patrol about this? They may be contacting…

[deleted]
Post reply on HN