Hacking a car computer using an MP3 file
Professor Stefan Savage from the University of California at San Diego sent a report to the Committee on Electronic Vehicle Management Systems at the National Academy of Sciences of the USA describing how to hack a car computer using an MP3 CD disc. It turns out that if you add a malicious code to the MP3 file, you can change the firmware of the audio system, which opens the door for further modifications of the software and hardware of the car.
The researchers did not provide any details about their work, they did not even say which particular model of car they managed to hack. Probably, the details will be published only in a few months, when manufacturers eliminate the vulnerability. The document should appear on this page : the announcement is already there, but there is no PDF yet.
The truthfulness of this information could be questioned if it were not for the credibility of Professor Savac, a recognized expert in the field of automotive electronics. Last year, at a security conference in Auckland, he conducted a real demonstration of how to stop the engine, lock the doors, turn off the brakes or falsify the speedometer readings ( PDF ) from a laptop connected to the OBD-II diagnostic port of the car.
It remains to add that more and more modern cars are equipped with Internet access, and not on a separate device, but directly on the main computer, which is on the same bus as the ECU device that controls all the basic systems of the car.
The researchers did not provide any details about their work, they did not even say which particular model of car they managed to hack. Probably, the details will be published only in a few months, when manufacturers eliminate the vulnerability. The document should appear on this page : the announcement is already there, but there is no PDF yet.
The truthfulness of this information could be questioned if it were not for the credibility of Professor Savac, a recognized expert in the field of automotive electronics. Last year, at a security conference in Auckland, he conducted a real demonstration of how to stop the engine, lock the doors, turn off the brakes or falsify the speedometer readings ( PDF ) from a laptop connected to the OBD-II diagnostic port of the car.
It remains to add that more and more modern cars are equipped with Internet access, and not on a separate device, but directly on the main computer, which is on the same bus as the ECU device that controls all the basic systems of the car.
')
Source: https://habr.com/ru/post/115601/
All Articles