News for hackers. Stuff that matters.

A comment on Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more. Parent comment

Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by close04 on Tuesday January 15, 2019 @11:21AM (#18912252)
Unfortunately most other manufacturers also still heavily rely on the woefully outdated and insecure CAN bus. Which means remotely hacking the poorly secured infotainment system can give you access to critical systems. Random example [0]. Your thought shouldn't be a comforting one.

[0] https://www.wired.com/2016/08/jeep-hackers-return-high-speed...

[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by SEJeff on Tuesday January 15, 2019 @11:48AM (#18912500)
Absolutely no idea why you're being downvoted here when this is in fact the truth. Virtually all automotive computers use the CAN bus in literally ever modern car in existence.
[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by antoinealb on Tuesday January 15, 2019 @11:59AM (#18912603)
It might be because Tesla also uses CAN bus, whereas the parent post implies that only "other automakers" do it.

Plus, CAN bus is just layer 2/3, you could build secure extensions on top of it, but I agree it is insecure by default.

[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by close04 on Tuesday January 15, 2019 @12:15PM (#18912780)
That's wasn't what I intended to imply. Rather that it's not like other manufacturers found the secret recipe and we should somehow feel safer in their cars. Added an "also" for clarity.
[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by SEJeff on Tuesday January 15, 2019 @01:26PM (#18913516)
Hence "virtually all". You're absolutely correct
[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by stcredzero on Tuesday January 15, 2019 @12:21PM (#18912846)
Absolutely no idea why you're being downvoted here when this is in fact the truth.

Because some people value the pro-Tesla narrative more than the truth. This is too bad, because one can value the pro-Tesla narrative and the truth at the same time. (Putting the truth first, of course.)

[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by PinguTS on Wednesday January 16, 2019 @02:36AM (#18918970)
CAN is as insecure as Ethernet as both are layer 2 protocols.

So its like the smart home.

[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by close04 on Wednesday January 16, 2019 @04:51AM (#18919498)
Perfectly correct. This is why IoT is a big deal, anyone hacking your poorly secured IoT device has access to the network it's in.

Two major differences though:

1) There are accessible ways for you to secure your home network, not so much when it comes to the car network.

2) Someone taking control of your car poses a more immediate risk to your life and the lives of others on the road around you than having your home network hacked.

[ Parent | on HN ]
Re:Pwn2Own Vancouver 2019: Tesla, VMWare, Microsoft, and more by xchaotic on Tuesday January 15, 2019 @12:34PM (#18912989)
as others are saying - you are correct - CAN is a shared bus so inherently insecure and physical access becomes a lot easier.
[ Parent | on HN ]