Taking Control of an M3 by hacking it wirelessly

[Nautik]

Anyone know what BMW is doing to prevent this? If you are not familiar with what I am talking about you might want to read this article:

http://www.technologyreview.com/computing/35094/?a=f

It would be nice to know that BMW is making an effort to secure the wireless components of our cars...

[ADV.1 Matt]

^^ Didn't even know that was possible. Very interesting (and slightly unnerving).

[OC3]

We're venturing into a scary world... Pretty soon, you almost have to be a wireless/IT security expert to harden your car from external wireless attacks.

[Nautik]

Originally Posted by OC3

We're venturing into a scary world... Pretty soon, you almost have to be a wireless/IT security expert to harden your car from external wireless attacks.

Yea that is why I would prefer a car who's ECU was completely isolated from any other information systems on the vehicle (such as all the GPS, media, wireless functions, etc.)

That way even though someone may be able to track where I am, disrupt or abuse my phone calls, destroy my media systems, etc. at least they can't take control of the car from me or destroy the engine while I'm driving it...

[rye m3]

So much for getting the 6NR BMW app option!!!

[redline9001]

This is going to be my next speeding ticket defence My car was hacked and i was not in control

[Marsala125]

Originally Posted by redline9001

This is going to be my next speeding ticket defence My car was hacked and i was not in control

Good One

[///My5UV]

OK, Wow. The fact that onstar, sync, and presumably BMW SOS are on the CAN bus and you can work your way backwards through it is the first revelation that actually bothers me. All the previous stuff was limited to getting physical access to the car. Ditto the bluetooth exploit, although I'd want to know more about how they can get paired to a car without access to it.

[Brainofjjj]

Just about anything can be hacked given enough time. Almost every system in the world has an exploit or someone working on exploiting it.

[OC3]

Wait 'til cars are operated by Windows OS, lulz

[Seattle S65B40]

I wouldn't worry about it. As the article said, it took 10 researchers two years to do this, including calling the car 130 times and gaining physical access to the vehicle to first learn the pathways.

We're also talking about apples and Oranges when you're referring to GM v. BMW. It's certainly possible, but if BMW stays one step ahead, like they do with their vehicle theft features, this is a non-issue.

[Nautik]

Originally Posted by Seattle S65B40

I wouldn't worry about it. As the article said, it took 10 researchers two years to do this, including calling the car 130 times and gaining physical access to the vehicle to first learn the pathways.

We're also talking about apples and Oranges when you're referring to GM v. BMW. It's certainly possible, but if BMW stays one step ahead, like they do with their vehicle theft features, this is a non-issue.

I'm hoping so. I'd just like to see something from BMW offering some type of encryption on those wireless features...

[M3maniac20]

Some of the researchers were probably from BMW. lol
I'm sure whatever happens, BMW will be able to counteract it. I thought that Onstar stuff was a little sketchy when it got to the point that you could do everything from your phone....but then again, in 12 years, your phone will probably be the key to your car.

[xquisit]

Taken from the article:

"The team analyzed possible attack scenarios as well. For example, they showed that high-tech car thieves could search for desired models of cars, identify their locations, and unlock them, all without any forced entry. They could conduct malicious surveillance, such as forcing a car to send out its GPS location at regular intervals. They could also sabotage a car, by disabling its brakes, for example."

[SenorFunkyPants]

Well if BMW (connectedrive) can remotely open your cars doors then the possibility exists for anyone to do it (with access to the right data).

[Jbook]

Not worried by this at all

[Nautik]

Originally Posted by Brainofjjj

Just about anything can be hacked given enough time. Almost every system in the world has an exploit or someone working on exploiting it.

You're absolutely right. But you can also make sure you aren't the low hanging fruit... just have to be a harder target than the next guy.

[Nautik]

Originally Posted by Jbook

Not worried by this at all

I'm not worried right now either. But what about in 2 or 3 years when people are running around with apps on their smart phones messing with people's cars? It is already super easy to do with standard wireless networks, even encrypted ones.

I guess if you live in a more rural area you wouldn't care much. But if you are in a city that has a bunch of IT savvy people, better watch out!

[mrkbbd]

Solution: park underground, no gps signal