News for hackers. Stuff that matters.
Re:List of Open Source Licences in Mercedes Cars [pdf] by adisbladis on Thursday October 24, 2013 @06:36AM (#6604423)
I would guess the control systems and entertainment/navigation systems are separated for that very reason.
Re:List of Open Source Licences in Mercedes Cars [pdf] by mcculley on Thursday October 24, 2013 @08:23AM (#6604789)
They are not that separated. Some modern cars have the entertainment system take note of the speed of the engine and adjust the volume accordingly. Some flip the infotainment display to a backup camera when the transmission is indicated to be in reverse.

This is in addition to some cars adjusting the side mirrors when in reverse. I remember reading of an exploit that took advantage of the fact that the security system was on the same network in a particular car and thieves were able to crack off a side mirror and inject an "unlock" command. Does anybody have a reference for that?

Re:List of Open Source Licences in Mercedes Cars [pdf] by spatulon on Thursday October 24, 2013 @08:52AM (#6604921)
They are typically connected, but (kind of) sandboxed. A small ECU acts as a bridge between the infotainment system and the CAN bus.
Re:List of Open Source Licences in Mercedes Cars [pdf] by tobithiel on Thursday October 24, 2013 @09:41PM (#6609269)
These things not always work very reliably. A guy from a supplier once held a security talk at our university. They basically filter out unwanted messages, but the manufacturer often don't configure them very restrictive, but use black list approaches.
Re:List of Open Source Licences in Mercedes Cars [pdf] by dominicgs on Thursday October 24, 2013 @07:11AM (#6604530)
They probably are completely separate, but the use of wireless protocols is not necessarily confined to the entertainment system. For example, wireless tyre pressure/temperature sensors are installed in many cars and can be read with SDR hardware[1]. It's not too much of a leap to assume that false readings could be injected.

[1] http://sandiego.toorcon.net/2013/10/07/dude-wheres-my-car-re...