Car Hacking Research: Remote Attack Tesla Motors by Keen Security Lab

[FrodosPet]

With several months of in-depth research on Tesla Cars, we have discovered multiple security vulnerabilities and successfully implemented remote, aka none physical contact, control on Tesla Model S in both Parking and Driving Mode. It is worth to note that we used an unmodified car with latest firmware to demonstrate the attack.

Following the global industry practice on “responsible disclosure” of product security vulnerabilities, we have reported the technical details of all the vulnerabilities discovered in the research to Tesla. The vulnerabilities have been confirmed by Tesla Product Security Team.

Keen Security Lab appreciates the proactive attitude and efforts of Tesla Security Team, leading by Chris Evans, on responding our vulnerability report and taking actions to fix the issues efficiently. Keen Security Lab is coordinating with Tesla on issue fixing to ensure the driving safety of Tesla users.

As far as we know, this is the first case of remote attack which compromises CAN Bus to achieve remote controls on Tesla cars. We have verified the attack vector on multiple varieties of Tesla Model S. It is reasonable to assume that other Tesla models are affected. Keen Security Lab would like to send out this reminder to all Tesla car owners:

PLEASE DO UPDATE THE FIRMWARE OF YOUR TESLA CAR TO THE LATEST VERSION TO ENSURE THAT THE ISSUES ARE FIXED AND AVOID POTENTIAL DRIVING SAFETY RISKS.

This video demonstrates the impact of our remote attack vector. REMINDER: WHAT YOU ARE ABOUT TO SEE IN THIS VIDEO ARE PERFORMED BY PROFESSIONAL RESEARCHERS, DO NOT TRY THIS AT

[longship]

1. But, but, but,... Autonomous vehicles are right around the corner!

We'll be seeing them everywhere! Really soon now!

Or maybe not.

[FrodosPet]

2. They are legal in Michigan, and I live in the heart of it (Oakland County)

New SDC friendly traffic lights are being installed, and the roads are getting more attention than I have ever seen in my life.

I am still waiting for my first live sighting, but I doubt if I will be waiting much longer.

[longship]

3. They aren't anywhere here.

I live in the heart of Newaygo County, where few roads are paved.

Good luck to you!

We don't even have traffic lights here. But we have a whole lot of snow in winter. And good luck to those traversing the mountain passes out west.

Autonomous vehicles are decades from being a thing. They're nothing but a Matrix wet dream.

[FrodosPet]

4. They are running in Pittsburgh already

Just because they are not ready, that does not mean it is not happening.

Each and every day, more data is being collected.

It's gonna be an interesting year in Warren at the GM Tech Center and in Ann Arbor at Mcity.
[hr]
GM grows autonomous team, builds test track in Warren

http://www.detroitnews.com/story/business/autos/general-motors/2016/06/20/gm-autonomous-team-builds-test-track-warren/86137530/

Warren — General Motors Co. expects to grow its autonomous vehicle development team by hundreds of people at its Warren Tech Center, just as the automaker aims to begin testing a fleet of self-driving cars on the campus later this year.

“We’ve got several hundred people in this space right now ... expanding to several hundred people more (by end of this year into next year),” said Ken Kelzer, vice president of global vehicle components and subsystems and an executive overseeing the $1 billion Warren Tech Center transformation and renovation project.

The carmaker earlier this year created an autonomous and technology vehicle development team and brought together engineers working on autonomous vehicle development. The workforce, from all areas and locations of GM, now are housed in an engineering building at the Tech Center built in 1954; some of the space already has been renovated and other areas will be renovated by the fall.

~ snip ~

“The nice thing about the Tech Center is there are a lot of different traffic maneuvers,” said Jon Lauckner, chief technology officer, in an interview last fall. “For example, we have roundabouts where you have to merge on and merge off. It turns out to be a fairly complicated situation. There are definitely medians, left turns across traffic, you know the kinds of things you’re going to find definitely in an urban environment. And the kinds of things that are going to allow us to basically refine and further develop the sensing and processing that we’re going to need to have a fully autonomous vehicle in the future.”

~ snip ~

Driving the Future of Mobility

http://www.mtc.umich.edu/vision

The University of Michigan is joining with a team of industry, government, and academic partners to develop the foundations of a commercially viable ecosystem of connected and automated vehicles for moving people and goods. Such a system has the potential to dramatically improve safety, sustainability, and accessibility.

Three aspects of the MTC are key to its success:

• Partners: The MTC has created a public-private partnership to work on connected and automated mobility systems. National, state, and local governments, along with a wide variety of industries will all play roles in shaping the future of mobility. MTC partners and affiliates encompass these varied stakeholders as well as other academic institutions working in this area.


• Deployments and Testing: The MTC will provide real-world testing with large cohorts of users in a variety of on-roadway settings in Ann Arbor and across Southeastern Michigan, as well as in a unique off-roadway test facility that simulates the complexities of an urban environment.


• Interdisciplinary Approach: The challenges ahead are not just technical. The MTC draws on the broad expertise of U-M and its partners to address the host of legal, political, social, regulatory, economic, urban planning, and business issues that must be addressed to devise and implement practical systems that take advantage of emerging technologies.

[longship]

5. Try the fucking Grapevine, with a semi-trailer on your ass.

Last edited Wed Sep 28, 2016, 01:00 PM - Edit history (1)

That would be the Tejon pass, an eight lane interstate highway which goes through the mountains northeast of LA. It is often closed down in winter because it is fucking scary dangerous even in summer. There are tractor trailer run out lanes on both east and west down hill, just in case the truck cannot negotiate the pass.

No rational person would put an autonomous vehicle on the Grapevine.

And no rational person would claim that autonomous vehicles are a good thing.

Here, we call it Grass Lake Road, curvy, narrow, unpaved, and part of it is below the level of the lake. Good luck with your so-called autonomous vehicle. You'll end up IN the lake. And your autonomous semi-trailer will be over the edge on the Grapevine. Needless to say, that's a rather large drop.