New way to steal your car: headlight 'CAN injection'

[Murfman]

Thieves are now stealing cars via a headlight 'CAN injection' (yahoo.com)

Sponsored

 

[Lowcountry Bronco]

Saw this the other day too, it has to be a physical connection, at least for now but give it time before they hack one thru the OTA modem.

 

[Newbie]

still undefeated:

 

[swooshdave]

As we've seen auto manufacturers are light years behind in software (deployment and security). I suspect it's going to get way worse before it gets better.

 

[swooshdave]

still undefeated:

I had one of those. They just cut the steering wheel and car was gone.

 

[Lowcountry Bronco]

still undefeated:

Manual transmission is still the best deterrent! Kids can figure out a way to hack your vehicle but don't know how a clutch works!!!

 

[Lil Red Broncette]

First, why do headlights require a "ECU"? Or any controller?

Second, the assertion that a criminal would need significant time to gain access is not well supported in my opinon. Criminals will find a way to get in quick. Who would have thought they be cutting off catalytic converters as easily as they do? Short cuts will be found.

I am an engineer and have designed CANbus hardware and written related software and at times am dumbfounded why some go overboard with technology when simple is often better and cheaper.

While there is certainly some advantages to distributed processing when used appropriatly, and CANbus is quite nifty, there is a point where it becomes too much. Some things are made overly complicated and become more fault prone by doing things with it that need not be done.

The speak about the need for a packet by packet encryptions and unique key per vehicle. I think that is going crazy. Getting into this war of measures and counter measures How about not putting something like key activation onto the common CANbus? Or make just the activation key a unique sequency that is long enough that one can't brute force it.

The whole idea that OTA modem can bridge to the CANbus also seems like a huge potential security issue.

 

[Newbie]

I had one of those. They just cut the steering wheel and car was gone.

https://www.thestar.com/autos/2022/...des-later-its-still-stopping-car-thieves.html

 

[zombie]

Interesting article (tech heavy) on this issue:

https://kentindell.github.io/2023/04/03/can-injection/

 

[vrtical]

soo smart, lets DTC the headlight units, but then dont actually put any security in place.

 

[Jdc]

Interesting article (tech heavy) on this issue:

https://kentindell.github.io/2023/04/03/can-injection/

I read this article a few days ago. It's interesting to see how it's done

 

[zombie]

https://www.thestar.com/autos/2022/...des-later-its-still-stopping-car-thieves.html

No actual "career criminal" would be defeated by one of those, as mentioned above they'll just cut the steering wheel or use any number of tools to open the lock.

Or you can just remove a rubber plug and shim it open:

 

[PrepVet]

still undefeated:

It's under 30 seconds to cut through the steering wheel and removed those.

 

[buzpro]

https://www.kbb.com/car-news/thieves-stealing-cars-through-headlight-hack/

 

[OmahaKevin]

As an old friend of mine always says ... "Security is an illusion"

Sponsored