News for hackers. Stuff that matters.
Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by lazide on Wednesday May 05, 2021 @02:06PM (#27053453)
I'm sure you're right and it is being added to a portfolio somewhere - it's also a valid point that for a state level actor, there are some inexpensive and effective ways to cause mass chaos that they've already got.

For instance. the Aquaducts that feed water to the city of LA go through some deserts north of there that are remote - and the giant pipes are exposed. There are no guards, nothing.

For a state level actor, a small explosive charge on one of those is probably trivial to do and would lock up LA in fear and panic for a long time - and essentially untraceable. Every major metropolis has some equivalent to this (contamination in a specific water supply, or damage to a specific bridge).

Being able to do similar things to vehicles of different types is also interesting, but the space is rapidly changing, and exploits would lose 'potency' rapidly compared to that small block of C4 and knowing someone who would place it for you. So more an R&D type interest than a practical operational capability one.

It's also easy for us to look at the trajectory, know the tech, and say 'this will change the world and we need to be prepared' - but most militaries and intelligence agencies tend to focus on what they already have experience with, or what happened last time. The old quote 'Generals always fight the last war' is very applicable. Part of the reason why is because until it has happened, you don't have any real data - just endless speculative paths, all of which are too divergent from each other to prepare for all at once, and too theoretical to justify funding because the projected costs of it happening are too divergent.

You saw it with COVID - we suspected something like this would happen soonish, we'd even had some scares recently like H1N1/swine flu - but even if you'd asked the most prepper types of us if they'd be willing to spend 100 billion to stop what happened - they'd go 'yeah right, that's not going to happen', or 'that would be a waste of money'

Now, I'm sure you'd get 75% or more of the popular vote on such a measure nation wide and everyone would consider it dirt cheap. Even if the odds of a repeat surprise event are quite low now.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by jerf on Wednesday May 05, 2021 @02:27PM (#27053753)
"For instance. the Aquaducts that feed water to the city of LA go through some deserts north of there that are remote - and the giant pipes are exposed. There are no guards, nothing."

Which is still a body on the ground in one place. These hacks can go country-wide pretty easily. It still seems like something that would be worth digging into because that digital scale can't be replicated by any physical action.

Plus attack-in-depth is a thing. If you can cheaply add "mess up all civilian automotives", you might want to do it, even if you are also blowing up aqueducts and such.

War sucks.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by lazide on Wednesday May 05, 2021 @02:55PM (#27054118)
100% agreed on all points. The cyberwar (hate the term, but it’s what’s used) equivalent of chemical warfare or a nuke is going to be..... incredibly nasty.
Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by jjav on Wednesday May 05, 2021 @04:21PM (#27055184)
> For a state level actor, a small explosive charge on one of those is probably trivial to do

Remember Oklahoma city bombing. It's trivial to do for a couple guys, never mind anyone more organized.

Re:Tesla Car Hacked Remotely from Drone via Zero-Click Exploit by lazide on Wednesday May 05, 2021 @04:32PM (#27055347)
For sure - what I was referring to is a state level actor can (and almost certainly does) afford to have thousands of those 'couple guys' already identified and in an action plan somewhere in their top secret list of dirty tricks, against pretty much anyone they think likely (or even not likely) to want that kind of ability against some day.

Someone COULD go to the store, grab a hammer, and smash my computer. It's a different type of situation however when someone has figured out what model of hammer they would want, from which store (and if it is in stock or not), how they would pay for it, and who they would call to do all these things in a way that I couldn't figure out who ordered or paid for it, to smash my particular workstation at my home on a specific desk tomorrow at 6am - if they wanted to.

It's important to keep in mind capabilities, inclinations, and consequences - when that person with that plan is playing against me in competitive gaming the next day, I need that workstation to win, and I just bet them $10k I could beat them in front of all of my friends.

Thankfully most of us don't have to deal with this in our daily lives, but we can still be collateral damage when someone else is playing these kinds of games. And nation states do on the regular.