Jeep software flaw - Internet engine & brake hacking

[Jim]

Jeep drivers can be HACKED to DEATH: All you need is the car's IP address Hackers can connect to brakes, engine over cellular network
21 Jul 2015 at 19:11, Iain Thomson

(http://www.theregister.co.uk/Author/2395)

Anyone driving about in a new Jeep Cherokee should update its software: at the moment the car's brakes and engine can be remotely controlled by anyone with an internet connection.

This update might not sound particularly important, but trust me, if you can, you really should install this one. pic.twitter.com/qhTCrBIho8 (http://t.co/qhTCrBIho8)
— Charlie Miller (@0xcharlie) July 20, 2015 (https://twitter.com/0xcharlie/status/623171594349842433) At next month's Black Hat hacking conference in Las Vegas, Charlie Miller and Chris Valasek – a duo who have hacked more cars than Mad Max – will show off an attack on a Jeep Cherokee that enables the remote control of the car's engine, brakes, and minor systems from miles away simply by knowing the car's public IP address.

(full story at the link - the flaw covers more brands than Jeep's)

http://www.theregister.co.uk/2015/07/21/jeep_patch/

[Adaa60]

yep... that's scary

[The StRanger]

Thank you Fiat....

[The StRanger]

I remember when they where 1st makein keyless entry you could use a garage door opener to access door and trunk locks...

[Adaa60]

does this issue affect the JK

[The StRanger]

Just the Chero's with a certain wireless system..

[Jim]

Here's a nice story on it - the jeep driver was their test dummy - reactions from the driver's seat (knowing something was going to happen)

http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/

Full story at the link, the intro is here...

I was driving 70 mph on the edge of downtown St. Louis when the exploit began to take hold.

Though I hadn’t touched the dashboard, the vents in the Jeep Cherokee started blasting cold air at the maximum setting, chilling the sweat on my back through the in-seat climate control system. Next the radio switched to the local hip hop station and began blaring Skee-lo at full volume. I spun the control knob left and hit the power button, to no avail. Then the windshield wipers turned on, and wiper fluid blurred the glass.

As I tried to cope with all this, a picture of the two hackers performing these stunts appeared on the car’s digital display: Charlie Miller and Chris Valasek, wearing their trademark track suits. A nice touch, I thought.