Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway

From	rickman <gnuarm@gmail.com>
Newsgroups	comp.arch.embedded
Subject	Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway
Date	2015-07-22 00:57 -0400
Organization	A noiseless patient Spider
Message-ID	<mon7pf$7no$1@dont-email.me> (permalink)
References	<mom6g4$i05$1@dont-email.me>

Show all headers | View raw

On 7/21/2015 3:28 PM, Rob Gaddi wrote:
> Relevant to many of us:
> http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway
>
> "Uconnect, an Internet-connected computer feature in hundreds of
> thousands of Fiat Chrysler cars, SUVs, and trucks, controls the vehicle’s
> entertainment and navigation, enables phone calls, and even offers a Wi-Fi
> hot spot. And thanks to one vulnerable element, which Miller and Valasek
> won’t identify until their Black Hat talk, Uconnect’s cellular connection
> also lets anyone who knows the car’s IP address gain access from anywhere
> in the country."
>
> Since they've so conveniently networked the entertainment system together
> with the steering, brakes, and transmission, an exploit into the former
> is an exploit into the latter.
>
> So the discussion topic for all of us engineers is: whose job should it
> be to stop this sort of nonsense from occurring.  Ideally there'd be some
> sort of government standards dictating what security measures need to be
> taken, but practically government's understanding of technology
> occasionally covers the toaster.  Is it each of our jobs to call stop the
> presses when we something so blatantly stupid, and refuse at the expense
> of our jobs to work on a security flawed project?

No need for government standards on the technology.  The existing tort 
law has as much or more effect on auto makers.  They will perform all 
sorts of gyrations to minimize the impact of mistakes via law suits.  If 
the government sets mandates on the technology auto makers will use that 
as their defense to say they performed due diligence.  Whey users ask 
why the system has other types of problems such as lacking features or 
poor performance, the auto makers will point to the government standards 
saying they limit what they are allowed to do.

Instead the government should make it easier to hold auto makers 
accountable for their mistakes.  I haven't driven any of the fancy newer 
cars, but I would be willing to bet the first time you use the "smart" 
systems to have to click an OK on the user agreement that has two 
portions which are not in the consumer's best interest.  The first is a 
limitation of liability which attempts to prevent law suits, but is not 
perfect.  The other is a requirement of the user to indemnify the auto 
maker making it impossible to ever collect on a liability claim if the 
user does manage to win a suit.  Both of these provisions should be 
outlawed by federal law.

History has shown that auto makers try to use federal standards to limit 
their liability.  We can prevent this by proactive measures in 
electronic technology liability law.

-- 

Rick

Thread

Semi-OT: Hackers Remotely Kill a Jeep on the Highway Rob Gaddi <rgaddi@technologyhighland.invalid> - 2015-07-21 19:28 +0000
  Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-21 13:00 -0700
    Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Clifford Heath <no.spam@please.net> - 2015-07-21 21:49 +1000
      Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-21 18:55 -0700
    Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway DJ Delorie <dj@delorie.com> - 2015-07-21 20:37 -0400
      Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-21 18:47 -0700
  Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Ian Yellowley <iany99@gmail.com> - 2015-07-21 14:35 -0700
    Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-21 15:22 -0700
      Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Ian Yellowley <iany99@gmail.com> - 2015-07-22 13:42 -0700
        Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-22 18:48 -0400
          Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway lasselangwadtchristensen@gmail.com - 2015-07-22 17:33 -0700
            Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Rob Gaddi <rgaddi@technologyhighland.invalid> - 2015-07-24 16:51 +0000
              Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Paul Rubin <no.email@nospam.invalid> - 2015-07-24 10:23 -0700
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-24 11:22 -0700
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Hans-Bernhard Bröker <HBBroeker@t-online.de> - 2015-07-24 21:49 +0200
              Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway hamilton <hamilton@nothere.com> - 2015-07-24 12:45 -0600
        Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-22 16:59 -0700
          Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-22 21:30 -0400
      Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway lasselangwadtchristensen@gmail.com - 2015-07-22 15:30 -0700
        Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-22 18:53 -0400
        Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-22 19:49 -0700
          Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-22 23:20 -0400
            Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Robert Wessel <robertwessel2@yahoo.com> - 2015-07-23 03:49 -0500
              Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Don Y <this@is.not.me.com> - 2015-07-23 03:26 -0700
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-23 12:09 -0400
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Hans-Bernhard Bröker <HBBroeker@t-online.de> - 2015-07-23 21:38 +0200
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-23 16:36 -0400
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Hans-Bernhard Bröker <HBBroeker@t-online.de> - 2015-07-23 23:56 +0200
                Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-24 13:25 -0400
              Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-23 11:32 -0400
  Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Ed Prochak <edprochak@gmail.com> - 2015-07-21 20:00 -0700
  Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway rickman <gnuarm@gmail.com> - 2015-07-22 00:57 -0400
  Re: Semi-OT: Hackers Remotely Kill a Jeep on the Highway Mel Wilson <mwilson@the-wire.com> - 2015-07-26 15:06 +0000

csiph-web