ECU hacked through tire pressure sensors
#1
Driver School Candidate
Thread Starter
Join Date: Sep 2008
Location: CA
Posts: 12
Likes: 0
Received 0 Likes
on
0 Posts
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
http://arstechnica.com/security/news...m_campaign=rss
Cars hacked through wireless tire sensors
By Peter Bright | Last updated August 10, 2010 3:20 PM
The tire pressure monitors built into modern cars have been shown to be insecure by researchers from Rutgers University and the University of South Carolina. The wireless sensors, compulsory in new automobiles in the US since 2008, can be used to track vehicles or feed bad data to the electronic control units (ECU), causing them to malfunction.
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator.
The new research shows that other systems in the vehicle are similarly insecure. The tire pressure monitors are notable because they're wireless, allowing attacks to be made from adjacent vehicles. The researchers used equipment costing $1,500, including radio sensors and special software, to eavesdrop on, and interfere with, two different tire pressure monitoring systems.
The pressure sensors contain unique IDs, so merely eavesdropping enabled the researchers to identify and track vehicles remotely. Beyond this, they could alter and forge the readings to cause warning lights on the dashboard to turn on, or even crash the ECU completely.
Unlike the work earlier this year, these attacks are more of a nuisance than any real danger; the tire sensors only send a message every 60-90 seconds, giving attackers little opportunity to compromise systems or cause any real damage. Nonetheless, both pieces of research demonstrate that these in-car computers have been designed with ineffective security measures.
The Rutgers and South Carolina research will be presented at the USENIX Security conference later this week.
Cars hacked through wireless tire sensors
By Peter Bright | Last updated August 10, 2010 3:20 PM
The tire pressure monitors built into modern cars have been shown to be insecure by researchers from Rutgers University and the University of South Carolina. The wireless sensors, compulsory in new automobiles in the US since 2008, can be used to track vehicles or feed bad data to the electronic control units (ECU), causing them to malfunction.
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator.
The new research shows that other systems in the vehicle are similarly insecure. The tire pressure monitors are notable because they're wireless, allowing attacks to be made from adjacent vehicles. The researchers used equipment costing $1,500, including radio sensors and special software, to eavesdrop on, and interfere with, two different tire pressure monitoring systems.
The pressure sensors contain unique IDs, so merely eavesdropping enabled the researchers to identify and track vehicles remotely. Beyond this, they could alter and forge the readings to cause warning lights on the dashboard to turn on, or even crash the ECU completely.
Unlike the work earlier this year, these attacks are more of a nuisance than any real danger; the tire sensors only send a message every 60-90 seconds, giving attackers little opportunity to compromise systems or cause any real damage. Nonetheless, both pieces of research demonstrate that these in-car computers have been designed with ineffective security measures.
The Rutgers and South Carolina research will be presented at the USENIX Security conference later this week.
#3
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
http://arstechnica.com/security/news...m_campaign=rss
Cars hacked through wireless tire sensors
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator..
Cars hacked through wireless tire sensors
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator..
![EEK!](https://www.clublexus.com/forums/images/smilies/eek1.gif)
#4
Tech Info Resource
![](https://www.clublexus.com/forums/images/ranks/rank-smod2.gif)
iTrader: (2)
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
It is an interesting attack vector though.
#5
Lexus Fanatic
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
God these manufacturers need to get it together. Also these little clowns that do stuff like this need a solid beating...........or spanking in the case of the perps
#6
Tech Info Resource
![](https://www.clublexus.com/forums/images/ranks/rank-smod2.gif)
iTrader: (2)
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
"Any inanimate object, regardless of its composition or configuration, may be expected to perform ... at any time ... in a totally unexpected manner, for reasons that are obscure or else completely mysterious."
Are you saying you've never had any interest in modifying your car/computer/phone/house etc.? Never had the urge to know what will happen if I push THIS button?
Just because these guys decided to target their attention on systems the manufacturers failed to secure doesn't mean they deserve any kind of punishment what-so-ever. Would you yell at the child bold enough to announce the Emperor has no clothes? I'd certainly hope not - if you would then all those things I've heard about you must be true.
#7
Lexus Champion
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
I'm taking this article with a grain of salt. I'm an IT guy and am pretty interested in security concepts in general. I listened to a lengthy podcast and read some articles that dealt specifically with this group's last publication. The recurring theme was that they weren't able to do anything to the car without physical access to the OBDII port while the car was running. So unless somebody with a lot of knowledge and time has managed to break into your car and get it running (or take your keys) then this was of no concern.
For that reason I'm skeptical that this group was able to do much more than send faulty TPMS readings to the ECU, without first getting physical access to the OBDII port and making their own 'customizations'.
I don't see how they'd be able to literally 'crash' the ECU just by talking to the TPMS receiver.
But if this is legit I'm sure I'll be hearing plenty more of it in the next week or two.
Are you aware of some particular reason why Toyota ECUs are more secure, or are you just saying this because you consider Toyota to be superior to other brands in general?
For that reason I'm skeptical that this group was able to do much more than send faulty TPMS readings to the ECU, without first getting physical access to the OBDII port and making their own 'customizations'.
I don't see how they'd be able to literally 'crash' the ECU just by talking to the TPMS receiver.
But if this is legit I'm sure I'll be hearing plenty more of it in the next week or two.
Are you aware of some particular reason why Toyota ECUs are more secure, or are you just saying this because you consider Toyota to be superior to other brands in general?
Trending Topics
#8
Lexus Fanatic
Join Date: Jan 2005
Location: A better place
Posts: 7,285
Likes: 0
Received 0 Likes
on
0 Posts
![Default](https://www.clublexus.com/forums/images/icons/icon1.gif)
Huh? All I meant was that for many years the aftermarket has had huge trouble with trying to crack Toyota or Lexus ECUs for modding purposes. This is very well known among the aftermarket and modders, that it's almost impossible to crack a modern Toyota/Lexus ECU and change parameters for the purpose of modding. Toyota also gives out almost no information regarding its ECUs, unlike other brands whose ECUs are much easier to crack, or in other words much more "mod friendly".
#10
Lexus Champion
Thread
Thread Starter
Forum
Replies
Last Post
sderman
RX - 2nd Gen (2004-2009)
37
04-27-16 08:12 AM
craigtaz
LS - 3rd Gen (2001-2006)
4
06-19-07 03:31 PM