News for hackers. Stuff that matters.
Re:Hackers Remotely Attack a Jeep on the Highway by danielweber on Tuesday July 21, 2015 @11:41AM (#9922992)
I don't know where the threshold is, but calling yourself a "security researcher" is not a blank slate to do whatever you want.

I think it's 100% OK to test on a private car on a private track.

Re:Hackers Remotely Attack a Jeep on the Highway by w8rbt on Tuesday July 21, 2015 @12:08PM (#9923254)
Or test on an official research highway such as Virginia Tech's Smart Road: https://en.wikipedia.org/wiki/Virginia_Smart_Road
Re:Hackers Remotely Attack a Jeep on the Highway by stillsut on Tuesday July 21, 2015 @11:48AM (#9923048)
Had my car stall on the highway once. Pretty scary because you lose power-brakes and power-steering as you're trying to pullover.

Was it a hacker? Nope, just a dumb mechanic that got trash deep into the air intake during a routine oil change.

How many (dumb mechanics)*(routine oil changes) are there in this country? Five-Six orders of magnitude more than auto hackers, which is why I don't see any harm in one more (where the driver knew ahead of time it was going to happen).

Re:Hackers Remotely Attack a Jeep on the Highway by danielweber on Tuesday July 21, 2015 @11:59AM (#9923176)
Cars aren't toys. Just because there are many stalls doesn't mean adding one more becomes acceptable.

Here's the good test: since humans were involved, how did they present this to their ethical review board?

I'm pretty confident the answer would be "what's an ethical review board?".

Re:Hackers Remotely Attack a Jeep on the Highway by marxmarv on Wednesday July 22, 2015 @05:55PM (#9932612)
DARPA don't need no ethics board.
Re:Hackers Remotely Attack a Jeep on the Highway by mattdotc on Tuesday July 21, 2015 @12:05PM (#9923227)
The difference is your 'dumb mechanic' made an unintentional mistake.

These people, on the other hand, knowingly and deliberately disabled a car on a highway. Yes, they had a plan, but they are still running their little experiment on other unwitting drivers on the highway. I don't consider the manner in which they ran their test to be ethical; it should have been performed on a closed track.

Re:Hackers Remotely Attack a Jeep on the Highway by greensoap on Tuesday July 21, 2015 @12:46PM (#9923612)
I will point out that the car didn't stall. Power brakes and power steering weren't affected. The transmission was forced into neutral which did affect his ability to accelerate. Still reckless and stupid. And probably worthy of a call to the police -- though debatable. I don't understand why they didn't just test this in the drive way or on jackstands or at a track or on a dyno. Driving the car on a public street was not needed.
Re:Hackers Remotely Attack a Jeep on the Highway by rhino369 on Tuesday July 21, 2015 @02:35PM (#9924630)
Your recklessness is judged by the extra harm risked.

You can't just waive it away because other risk is more dangerous across the entire nation. Under that standard: One little murder is a rounding error compared to the 2.5 mil who die each year.

Re:Hackers Remotely Attack a Jeep on the Highway by aptwebapps on Tuesday July 21, 2015 @12:07PM (#9923251)
The fact that the driver knew ahead of time does mitigate the danger but does not excuse the remaining danger. The fact that there are already lots of dangerous stalls seems completely besides the point to me.
Re:Hackers Remotely Attack a Jeep on the Highway by jblow on Tuesday July 21, 2015 @12:38PM (#9923533)
Bad calculation. One auto hacker can shut down all vulnerable cars simultaneously.
Re:Hackers Remotely Attack a Jeep on the Highway by yellowapple on Tuesday July 21, 2015 @03:23PM (#9925014)
They did test in controlled environments previously, according to the article. Said tests were ignored by the auto manufacturers.