Toyota runs a car-hacking event to boost security (2024)
toyotatimes.jp
Toyota runs a car-hacking event to boost security (2024)
1–10 of 115 posts
Re: Toyota runs a car-hacking event to boost security (2024)
#2The CAN bus, the network interface vehicle components use to communicate was, at least as of a few years ago, the source of basically infinite vulnerabilities.
Add in over the air updates or worse, updated bluetooth or radio firmware and you find things like stopping a vehicle remotely at highway speeds[1]
[1] https://fractionalciso.com/the-groundbreaking-2015-jeep-hack...
Re: Toyota runs a car-hacking event to boost security (2024)
#3I love when companies openly embrace their security vulnerabilities rather than hide behind them, cough Kia
Re: Toyota runs a car-hacking event to boost security (2024)
#4A good starter would have been running the keyfob data on a different CAN line than the one going into the headlights... you know, the one you can reach with your hand from the outside.
Then we could also talk about encryption, but at least making it a tad more difficult to have physical access.
Not that toyota is the only one. If you ever notice a car that has a reinforced grill protecting the front RADAR, or the rear lights... now you know why.
Re: Toyota runs a car-hacking event to boost security (2024)
#5The CAN bus, the network interface vehicle components use to communicate was, at least as of a few years ago, the source of basically infinite vulnerabilities. Add in over the air updates or worse, updated bluetooth or radio firmware and you find things like stopping a vehicle remotely at highway speeds[1] [1] https://fractionalciso.com/the-groundbreaking-2015-jeep-hack...
The people behind that stunt were immediately hired by GM.
Re: Toyota runs a car-hacking event to boost security (2024)
#6The CAN bus, the network interface vehicle components use to communicate was, at least as of a few years ago, the source of basically infinite vulnerabilities. Add in over the air updates or worse, updated bluetooth or radio firmware and you find things like stopping a vehicle remotely at highway speeds[1] [1] https://fractionalciso.com/the-groundbreaking-2015-jeep-hack...
IIRC, many TPMS systems run as CAN over IP, basically giving unsecured network access to a car if it thinks it's talking to a TPMS. Granted that some/most these sensors typically have to be "paired" with a car using a scantool (sometimes), but IIRC, some are self-pairing creating a vulnerability where the legit sensor could be replaced with a hostile one. Also the possibilities of spoofing, sniffing, and/or packet injection seem real too.
Re: Toyota runs a car-hacking event to boost security (2024)
#7That's great, but the writing is still on the wall if Toyota doesn't get serious about electric cars.
With their current trajectory Toyota is headed at 1000mph directly towards being the next Blackberry, Kodak, Nokia or Blockbuster.
I say this as someone who owned a Prius for 10 years and loved it, and have also driven their hydrogen car. The BZ4X is badly named overpriced garbage, not enough and not good enough. The clock is ticking and they have to act yesterday to avert disaster and they're sitting their twiddling their thumbs.
Currently Tesla is the iPhone to Toyota's Nokia and they're going to have to work very hard very soon to turn that around or their company will die.
Re: Toyota runs a car-hacking event to boost security (2024)
#8That's great, but the writing is still on the wall if Toyota doesn't get serious about electric cars. With their current trajectory Toyota is headed at 1000mph directly towards being the next Blackberry, Kodak, Nokia or Blockbuster. I say this as someone who owned a Prius for 10 years and loved it, and have also driven their hydrogen car. The BZ4X is badly named overpriced garbage, not enough and not good enough. The…
Why make electric cars when you can bribe politicians to tax EVs and promote hybrids?
Re: Toyota runs a car-hacking event to boost security (2024)
#9That's great, but the writing is still on the wall if Toyota doesn't get serious about electric cars. With their current trajectory Toyota is headed at 1000mph directly towards being the next Blackberry, Kodak, Nokia or Blockbuster. I say this as someone who owned a Prius for 10 years and loved it, and have also driven their hydrogen car. The BZ4X is badly named overpriced garbage, not enough and not good enough. The…
Why make electric cars when you can bribe politicians to tax EVs and promote hybrids?
Are you talking about Toyota or every german automaker ;)
Re: Toyota runs a car-hacking event to boost security (2024)
#10That's great, but the writing is still on the wall if Toyota doesn't get serious about electric cars. With their current trajectory Toyota is headed at 1000mph directly towards being the next Blackberry, Kodak, Nokia or Blockbuster. I say this as someone who owned a Prius for 10 years and loved it, and have also driven their hydrogen car. The BZ4X is badly named overpriced garbage, not enough and not good enough. The…
I'd say the EU manufacturers are in an even worse position than Toyota as their electric lineup isn't great and they have massive reliability problems on both ICE and BEV cars unlike Toyota.
Currently they only survive in the EU thanks to tarrifs on Chinese cars.
And I would say the opposite about Tesla, they experienced the biggest selling drop of all brands combined, if there's one brand going to crash first, I'd bet on Tesla.