Tag Archives: OnStar

1.4 Million Hacked Chryslers Recalled

Logo_Fiat_Chrysler_AutomobilesChrysler has recalled 1.4 million cars because of  a terrifying hacker demonstration. Hackers have released a video of a Chrysler Jeep being controlled by hackers leaving the driver helpless. Chrysler cars subject to the recall are 2015 Dodge Ram pickup, Challenger and Viper cars, Jeep Cherokee and Grand Cherokee SUVs.

African-Americans love theirs. Let’s just be real with that. A new car is a symbol of success and sophistication. Cars have become technologically advanced and automakers are rushing to get as much connectivity into cars as possible for multiple reasons.  Modern automobiles depend on computers and the Internet to function at the maximum possible efficiency. At the same time this technology allows the owner to enjoy luxuries and access to information and services unheard of in automotive history. But there is a price to pay for being connected and it’s more than the monthly payment.

Internet connectivity is used to collect vehicle data, perform over the air updates and improve car safety. However one of the biggest reasons is money. Business Insider predicts that 75 percent of cars wil have be capable of connecting to the Internet by 2020. Car companies see connectivity as a selling point. Sales from connected cars are expected to exceed $152 billion by 2020. But entertainment is not a major selling point for connected cars. Safety is.

But connectivity, even in your car, means hackers and hackers have become the newest danger on the highway.

Recently two hackers, Charlie Miller, security researcher for Twitter and Chris Valasek, Director of Vehicle Security Research for IOActive, used their know how to exploit a weakness in Chrysler’s Uconnect on-board system.

Uconnect is found on board literally hundreds of thousands of Fiat Chrysler cars, SUVs and trucks. Because of the car’s cellular connection anyone who can discover the car’s IP address can take control of it from anywhere in the country. “From the attacker’s perspective, it’s a super nice vulnerability,” says Miller.

From a distance of a few miles the men were able hack a Jeep Cherokee SUV and turn on the air conditioning, change the radio station and turn the windshield wipers on and off. Not only were they able to do all this but they also projected their images on the dashboard screen.

These commands entered the car’s computers through the entertainment system. It became really terrifying when the hackers took control of the accelerator, steering, brakes, transmission and ignition systems. They literally hijacked a moving vehicle leaving the driver helpless.

Miller and Valasek reported their hack to Fiat Chrysler who issued a patch for the vulnerability. The software patch can be downloaded online from Chrysler’s website but a dealership mechanic has to install it. Chrysler has also issued over the air updates.

But that was simply not enough. Now Chrysler has recalled 1.4 million cars because of the hack. 

The hackers have also demonstrated this capability with the Ford Escape and Toyota Prius.

Another hacker had demonstrated the ability to hack into any GM car equipped with the OnStar system. Security researcher Samy Kamkar posted a video of a device he created that demonstrates how he can intercept communications between GM’s RemoteLink mobile app and the OnStar cloud service. He was able to unlock and start the car using the device. However the device needs a little help. A small wireless device must be placed inside the target vehicle and it must be in range of Kamkar’s device. So make sure your doors are locked when you leave you GM car or truck. According to Kamkar GM is aware of the vulnerability.

And what has GM done? GM OnStar announced that it has released a software patch to update its RemoteLink app for Apple iPhone. But that seem to have failed. Kamkar told GM officials he could still track and hack their cars. GM did not acknowledge its failure to correct the problem but Tweeted, “enhanced RemoteLink app will be available soon to fully mitigate the risk.” Kamkar confirmed to WIRED.com that the patch has indeed blocked his device.

Now the federal government has taken notice of this growing threat to highway safety. National Highway Traffic and Safety Administration chief Mark Rosekind is trying to determine just how many automakers are using wireless equipment from the same company that supplies Fiat Chrysler.

“This is a shot across the bow,” said Rosekind. “Everybody’s been saying ‘cybersecurity’. Now you’ve got to step up. You’ve got to see the entire industry proactively dealing with these things.”

Senators Ed Markey (D-MA) and Richard Blumenthal (D-CT) are crafting legislation mandating that cars sold in the U.S. meet set standards against digital attacks and owner privacy.

The bill would require the NHSTA and the Federal Trade Commission to work together to create new standards requiring automakers to meet in regards to both a vehicles’ defenses against hackers and how manufacturers can safeguard owners personal information including location records collected from the vehicles they sell.

Three major points of Markey and Blumenthal’s bill  are;

  • It will require the NHTSA and the FTC to set security standards for cars. Standards will be set to isolate critical software systems from the rest of a car’s internal network.
  • Testing will be required by security experts and onboard systems must be able to detect and respond to malicious commands on the car’s network.
  • The FTC and NHTSA will set privacy standards. Automakers will be required to inform buyers of how they collect information from the vehicles they sell and permitting drivers to opt out.
  • Restrict how the information collected can be used for marketing.
  • Manufacturers will be required to display window stickers ranking a cars security and privacy protections.

Related Articles;

How Hackable is Your Car?

Hack My Ride!

 

Teen Driving Worries? There’s an App for That

canstockphoto22566500Any parent will tell you their greatest fear is the day their child gets behind the wheel for the first time.  Their child is moving beyond their control and watchful eye. They are entering the jungle called life and the open road. They are driving. Fortunately there is technology and apps for that.

For parents, especially African-American parents, driving opens a terrifying stage in their child’s life. An encounter with the wrong police officer can be deadly. For those fears black parents with teen drivers, and themselves, there is the Driving While Black app. This app educates and prepares them and their child to survive encounters with police officers. It provides tools that allows them to document the encounter for later reference, immediately notify parents if they are stopped and legal information. Driving while black should not be a lethal task but we know it happens.

But we also know how teens tend to behave in a reckless manner and suffer from basic inexperience on the road. According to the Insurance Institute for Highway Safety 16 to 19-year-olds are nearly three times more likely to have an accident than drivers ages 20 and over. In the U.S. most teens dream of the day they begin to drive. And eventually they will want a car of their own. So the IIHS offers this list of safest used cars for teens.

But as long as they are driving mom and dad’s car parents will want to monitor and educate their child about driving. Now General Motors is offering a new way for parents to track their child’s behavior behind the wheel.

GM’s new product, “Teen Driver,” and will be available in the 2016 Chevrolet Malibu.

Parents can program “Teen Driver”  to track how far their teen has driven,  how fast they drive, record any speed warnings issued during a drive, stability control events, anti-lock brake events, forward collision alerts and forward-collision braking events if the vehicle is equipped with that option.

To activate Teen Driver parents unlock the feature by creating a PIN in the “settings” menu of their available MyLink system. This then allows them to register their teen’s key fob. The system only records when that key fob is in use.

To download and review the full report parents just enter a password on MyLink. This tool can used to help a teen polish their driving skills. Parents could also spot potentially troubling behavior such as speeding and sudden hard braking.

But many parents can’t wait or afford a brand new 2016 Malibu. For those parents there are options available now.

If you currently own a late model GM car there is the OnStar emergency communications system. This service can locate their car on a map using GPS. OnStar will also inform the owner when the vehicle has an airbag deployment.

Ford Motor Company sponsors the RoadReady app. The app is an extension of The Parent’s Supervised Driving ProgramThe RoadReady app allows parents to track and log driving habits during their child’s learner’s permit process and is available on Apple devices.

Travelers Insurance offers IntelliDrive a plug-in device that records driving behaviors. Parents can see  the location and driving history of their teen. Parents get a weekly report on their teenagers driving habits that include speed, acceleration, braking, and driving hours. Most importantly parents will be alerted via text or email of unusual activity such as when their child goes beyond set boundaries. The technology is limited and is only available in several states.

Progressive Insurance Snapshot is also plug-in device that records driver behavior such as acceleration and braking as well as daily miles driven and the time of day the driving takes place. Progressive does not market the device as a way to monitor teens but it could certainly be used that way. But there are a few things you need to know about Snapshot.

Cellcontrol blocks your teenagers cell phone while driving. If someone tries to tamper with the device  it sends a text or email alert to a designated administrator. Cellcontrol is currently available on BlackBerry, Android, and Windows Mobile 5 and 6.

Parents can learn about other technology for monitoring their teens driving habits by visiting these sites.

USA Today: Apps Etc. Monitor Teen Drivers

Consumer Reports: How to Track Your Teen Drivers

Now you know