This forum is in archive mode. You will not be able to post new content.

Author Topic: Vulnerability in GM cars  (Read 759 times)

0 Members and 4 Guests are viewing this topic.

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Vulnerability in GM cars
« on: August 01, 2015, 02:07:56 AM »
Samy Kamkar is truly a great guy.
http://mashable.com/2015/07/31/gm-onstar-hack/
« Last Edit: August 01, 2015, 02:08:17 AM by Khofo »
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Vulnerability in GM cars
« Reply #1 on: August 01, 2015, 08:27:26 AM »
I'd be surprised if he found vulnerabilities in old cars instead. With "smart" cars it's becoming more and more like watchdogs...

Offline Satori

  • Peasant
  • *
  • Posts: 88
  • Cookies: 3
    • View Profile
Re: Vulnerability in GM cars
« Reply #2 on: August 01, 2015, 02:20:34 PM »
I'd be surprised if he found vulnerabilities in old cars instead. With "smart" cars it's becoming more and more like watchdogs...

Heres some general info for cars not based on apps and that:
http://www.autosec.org/pubs/cars-usenixsec2011.pdf overview of what can be done
http://www.autosec.org/pubs/cars-oakland2010.pdf bit more detailed
http://illmatics.com/car_hacking.pdf deeper into package analyzing

And if you wanna learn more and earn those big bucks on the next gen security you should check their sources.
The problem they have is that all the critical systems such as brakes,speed,steering is all somewhat connected to the non critical systems like cd player and AC.

Offline khofo

  • EZ's Swashbuckler
  • Knight
  • **
  • Posts: 350
  • Cookies: 25
  • My humor is so black, it could go cotton picking.
    • View Profile
Re: Vulnerability in GM cars
« Reply #3 on: August 01, 2015, 03:13:18 PM »
I am just waiting for the day when someone will take control of all them self driving cars.
Quote from: #Evilzone
<Spacecow18> priests are bad ppl
<Insanity> Holy crap
Of course God isnt dead. He's out there partying with the Easter Bunny, Santa Clause, Tooth Fairy, and the Man on the moon...
Some of my work: Introduction to Physical Security

Offline th31nitiate

  • Peasant
  • *
  • Posts: 56
  • Cookies: -4
    • View Profile
Re: Vulnerability in GM cars
« Reply #4 on: August 02, 2015, 01:41:58 PM »

Samy Kamkar is truly a great guy.
http://mashable.com/2015/07/31/gm-onstar-hack/

There is one thing about sammy that always makes me wonder, the guy got banned from using computer systems for a few years and as soon as he got back on the scene he was dropping zero days or equivalent techniques ?


Now how does one do that ?

Offline Darkvision

  • EZ's Fluffer
  • VIP
  • Royal Highness
  • *
  • Posts: 755
  • Cookies: 149
  • Its not a bug, It's a Chilopodas.
    • View Profile
Re: Vulnerability in GM cars
« Reply #5 on: August 02, 2015, 03:19:11 PM »
There is one thing about sammy that always makes me wonder, the guy got banned from using computer systems for a few years and as soon as he got back on the scene he was dropping zero days or equivalent techniques ?


Now how does one do that ?

you dont really seem to understand hacking. It's not about tools, though in some cases you might need them. It's about creative thinking and knowledge. Neither of which you need a computer for. In other words he could still notice a flaw, or have an idea that he could work out the details of without a computer, then when he had access again quickly implement it. Not to mention his video;s on the master lock flaw. That is 100% found in the analog world, he just digitized/automated the process. Now im not familiar with his background enough to know why he was arrested bla bla(i havent bother googling him atm) but he could obviously find that flaw with nothing more than time, or in the case that he talks about..a dremel and looking at its inner workings. For someone as used to thinking outside the box as he is, it would be more shocking to NOT find exploits in things.

Anyway if you need more examples i could do it, but i think that illustrates the point well enough as is so going to leave it at that for now.
The internet: where men are men, women are men, and children are FBI agents.

Ahh, EvilZone.  Where networking certification meets avian fecal matter & all is explained, for better or worse.

<Phage> I used an entrence I never use

Offline th31nitiate

  • Peasant
  • *
  • Posts: 56
  • Cookies: -4
    • View Profile
Re: Vulnerability in GM cars
« Reply #6 on: August 23, 2015, 05:45:28 PM »
you dont really seem to understand hacking. It's not about tools, though in some cases you might need them. It's about creative thinking and knowledge. Neither of which you need a computer for. In other words he could still notice a flaw, or have an idea that he could work out the details of without a computer, then when he had access again quickly implement it. Not to mention his video;s on the master lock flaw. That is 100% found in the analog world, he just digitized/automated the process. Now im not familiar with his background enough to know why he was arrested bla bla(i havent bother googling him atm) but he could obviously find that flaw with nothing more than time, or in the case that he talks about..a dremel and looking at its inner workings. For someone as used to thinking outside the box as he is, it would be more shocking to NOT find exploits in things.

Anyway if you need more examples i could do it, but i think that illustrates the point well enough as is so going to leave it at that for now.


I understand what you saying about the mind set of a hacker. But d you think if someone was to go in jail for lets say 3 years, they could come out beging able to exploit stuff or do you think that technology would have left them behind and they wont be able to catch up to understand it ?

 



Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.