DEF CON 23 - Charlie Miller & Chris Valasek - Remote Exploitation of an Unaltered Passenger Vehicle

What people said

LinuxBender · 2023-07 · Reference

I believe they should have instead phrased it something along the line of " AI facilitates a new generation of Skiddies [1] lowering the bar even further to malicious behavior without much technical knowledge." or something along that line. They're not wrong. Now a person with little or no technical knowledge can ask an LLM in plain English how to generate a more complex script that does {x+y+z} vs. at least having to know some degree of a scripting language or being limited to one of the well known and defended against skiddie tools that only perform {x}. A theoretical example would be a low-tech person taking full control of an internet connected car on a live highway. It's been done by technically advanced researchers [2] but now the bar to entry is now a lot lower. [1] - [LINK] [2] - [VIDEO] [video][46 mins]

Read the original HN comment ↗

l-p · 2021-12 · Reference

Yes because it'll load an image from a domain that expired and is now controlled by a nefarious third-party. The image is now a payload targeting the out of date image loading lib used by the onboard entertainment system that has seen no updates for 5 years. This entertainment system is connected to the actual driving electronics of the car that will now brake at full force the next time it reaches 130 km/h. This scenario is fictional, but possible. cf. the works of Charlie Miller and Chris Valasek. [LINK] [LINK] [VIDEO]

Read the original HN comment ↗

bradleybuda · 2018-08 · Reference

At DEF CON 23 there were two car-hacking talks that made an impression on me: one about hacking a Tesla [1] and one about hacking a Jeep [2]. FWIW, I came away thinking that the software architecture of the Tesla was light-years ahead of what Jeep (and presumably many other legacy manufacturers) was shipping: [1] [LINK] [2] [VIDEO]

Read the original HN comment ↗