New cracks

[Ande]

By Jim Smith,Editor, Tire Review magazine
Geek media was all atwitter last week when it was revealed that the lowly TPMS sensors in a car could be used to track that vehicle. Or worse.
Seems that researchers from Rutgers University and University of South Carolina discovered that the wireless communication between tire and vehicle that tells a driver when their inflation pressure is too low can be traced or even forged.
It is a security flaw in a vehicle computer system that no one considered.
And it could bring even wider concerns, such as how on-board systems could be hacked, allowing someone to literally take over control of a vehicle.

As for the TPMS issue, researchers found that each sensor’s unique 32-bit ID was unencrypted, so communications between the in-wheel sensor and the vehicle computer could be intercepted by an outsider from as far away as 130 feet.

“If the sensor IDs were captured at roadside tracking points and stored in databases, third parties could infer or prove that the driver has visited potentially sensitive locations such as medical clinics, political meetings, or nightclubs,” the researchers wrote.

Worse yet, intruders could overwhelm the vehicle’s computer with low pressure readings that would repeatedly set off the warning light, or send messages to the control unit that could confuse or break the unit.
“We have observed that it was possible to convince the TPMS control unit to display readings that were clearly impossible,” the researchers wrote, noting that they were able to confuse the control unit beyond repair.

Okay, Tire Cracking anyone?

[dredge]

the professional killer can rest aside now, I think. This security flaw definitely could kill people easily...

[grr]

this study would lead to birth of new crackers, Sensor crackers

[INDRANIL]

Thanks for the interesting news Ande .

sensor’s unique 32-bit ID was unencrypted

[princeaniket]

on-board systems could be hacked, allowing someone to literally take over control of a vehicle.

janes bond movie typo...
gud.. info ande..

[JayCub]

Handing safety over to a computer... errr no... in this country few look after their cars that's why we had to have cars put through testing and the standard has risen.. as for the tyre inflation it's just a gimick, you should check your tyres regularly any way common sense and if a tyre is under or over inflated you should notice the handling of the car change..

Thank you for the information Ande it was an interesting read... and maybe wives can keep a check on wondering husbands.. the truth behind the article is invasion of privacy..

[Ande]

... and maybe wives can keep a check on wondering husbands.. the truth behind the article is invasion of privacy..

You know most all rentals in the US have GPS installed. Any car that has "On-Star" has a GPS installed. And of course 95% of all cell phones have at least a 911 GPS installed.

The wife may not know where you are, but the NSA & CIA have you down to a meter or so. We might as well have telepathy for all the privacy we'll have until counter measures have been created.
I know. How about a personal firewall that you can wear?

[hellnoire]

You know most all rentals in the US have GPS installed. Any car that has "On-Star" has a GPS installed. And of course 95% of all cell phones have at least a 911 GPS installed.

The wife may no know where you are, but the NSA & CIA have you down to a meter or so. We might as well have telepathy for all the privacy we'll have until counter measures have been created.
I know. How about a personal firewall that you can wear?

But then the NSA/CIA/FBI/*PD will want immediate access in...

[johnshaw1917]

H'mmmm! Another way for "big brother" to keep an eye on us. Its kind of scary to me, when one's privacy can be so easily violated nowadays. At least my 97 Chevrolet pickup doesn't have any special gadgetry installed.

[safeguy]

Ermmm...............

Seems like a good study for environment-friendly enthusiast - they can use this new finding to tell others to stop using cars and opt for bicycles or walk instead.