dumb cars will be worth their weight in gold soon
this post was submitted on 26 Sep 2024
529 points (98.0% liked)
Technology
59412 readers
2839 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
Just like how manual cars became anti theft.
My friend has his Kia broken into and started, but it’s a standard so they ditched it hahaha
load more comments
(4 replies)
My car got dumbed for me because they killed the 3g network it was running on
Just because you can't use it doesn't mean a hacker can't. If someone discovered a vulnerability in the 3g handshake or encryption protocol, it could be an avenue for an RCE.
Especially when there are no security updates anymore. They should just rip out any possible receiver there is for mobile communication
Honestly if someone manages to figure that out I would want to know, that way I can finally use my cars remote start 😄
I wish, but most people don't know / care about this stuff, it's not going to really percolate into the public consciousness .
According to the dealership my car isn't worth it's weight grass clippings because it's too old.
load more comments
(1 replies)
load more comments
(17 replies)
Yeah... fuck this shit. This is part of the reason I still drive a nearly 20 year old vehicle. It has features I want, and can't be stolen via fucking API calls. Absolute insanity.
I think Hyundai/Kia group has done unfathomable damage to their brands. Kia, despite being a budget brand, wants to be seen as a legit competitor to Toyota or at least Nissan. Their corner cutting with the immobilizers and the resulting "USB" theft shit was bad enough. Now this exploit.
They're just terrible cars. I've had two...they were great until they weren't. I literally had a screw fall out of the headliner the other day bringing it home from a nearly 1000$ exhaust patch/repair. It's not 10 years old yet and only has 60k miles.
The other one has had the engine replaced already (under warranty thank god).
We are likely replacing both of them next year. I'm never buying a Kia again.
My Toyota with 300k+ miles has cost me $285 in repairs minus maintenance costs. I’ll likely get at least another 100k. Just placing these goalposts here…
load more comments
(23 replies)
There's just no good reason to have anything beyond the radio/nav etc in a car connected to the Internet. Remote start can be done with just the key.
You know what fuck builtin nav. Connect it to my phone and let that be it for navigation.
Plus if you use your phone for nav you can use whatever maps you like. My city is mapped pretty good on openstreetmap so that's what I use.
I would say even those don't need Internet. Navigation can be updated using a USB drive, and I have a phone for audio so I just need bluetooth.
The only network connection I want in my car is to notify emergency services if the airbags go off.
load more comments
(1 replies)
load more comments
(43 replies)
Let the fucking hacking begin. Fuck these assholes. They are milking people out of their last penny, and on top of that they're selling people's driving data to data brokers who sell it to insurance companies that jack up prices.
Let the fucking hacking begin. Fuck these assholes.
Then you're gonna hack the company, not the endusers' cars.
Right?
Right?
The ones on the dealership lot
load more comments
(1 replies)
FYI: From the article: “These vulnerabilities have since been fixed, this tool was never released, and the Kia team has validated this was never exploited maliciously.”
load more comments
(1 replies)
I’ve noticed a lot of issues showing up for the Kia and Hyundai cars security wise. I wonder if they’re having issues because there’s more focus on those cars or if their security is really that bad.
The Kia/Hyundai "challenge" where people were stealing their cars with a USB cord is because they opted not to include an immobilizer in US models for a decade. Every other car brand had them as standard. Kia even had them as standard in non US cars, but because the USA stupidly does not have a law about it, they opted to drastically reduce car security to save a few dollars per car.
This has made them prime targets, as people know they make bad security choices whenever they can save a buck.
So a bit of both, I expect.
load more comments
(1 replies)
Both probably. I’m sure a lot of cars have problems like this, but they just haven’t been found and there are already known vulnerabilities to focus on.
load more comments
(2 replies)
This is the problem with digital serfdom, those lording it over us aren't perfect either. Not only should we be able to connect our cars to our own server, we should be able inspect provided server implementation to see if it's a bag of nails.
aren't perfect either
You misspelled "are fucking morons" :)
This is why you have to install the latest software updates on your license plate. One time I let my gas cap firmware get outdated and someone downloaded my car.
load more comments
(1 replies)
Why does a car need to be connected to the internet? A reliable rule of conduct in aeronautics is that systems which are deemed critical to safety are air gapped from the systems which are connected to the internet, so in the event that those systems are compromised by malware or hackers, the safety critical systems won't also be compromised.
Why is it seemingly taking automotive manufacturers so long to catch on to this principle? Before anyone mentions downloadable features, I do not see that as a means of justification. Like with videogames, if you're paying good money for a product, that product should already be finished by release. Hiding content that should already exist on a car is egregious and the normalisation of it incentivizes manufacturers to release vehicles that are incomplete and should not have been released in their current state.
load more comments
(2 replies)
Nice writeup
I know the majority of you hate Tesla, but security is something they do take more seriously. They even take part in pwn2own to help find vulnerabilities.
All auto manufacturers should be taking part in that.
Nothing like winning a car to get people to try and break into it publicly.
Edit: Also details on the 2025 event in January just recently announced. https://www.zerodayinitiative.com/blog/2024/9/23/announcing-pwn2own-automotive-for-2025
I have my money on Tesla being the first cloud-connected car (that phrase shouldn't exist) to be hacked and push a malicious firmware that will cause all cars to simultaneously activate self driving and to pull a hard left at a specific time (time bomb).
You should watch - Leave the World Behind
You might be right, but I don't think it'll be because their cars are the easiest to hack, it'll be because they have the most cars out there capable of doing this and it'd be more impactful attack if successful.
(edit: Also they'd be able to exert the most control on their cars with the software/sensors available today at scale. E.g they could more easily have the car drive around until it finds a pedestrian to hit)
(edit: Further, you can make the most changes to a Tesla as they have one of the more (or probably most) advanced OTA update capabilities)
They are definitely a prime target.
load more comments
(3 replies)
view more: next ›