Hacking into a phone is unlikely to physically hurt the victim. But hacking into a car?
A security research team in China hacked into a Tesla Model S[1] and said they took over the car's brakes from 12 miles away. A video released this week shows members of the research team being thrust forward as the remote hacker slammed the brakes on command.
The demonstration took place in an empty parking lot. No one was injured.
The team from Keen Security Lab[2], an arm of Tencent, also used a laptop computer to turn on the windshield wipers, retract the side view mirror and pop open the trunk, all while the car was moving.
While the car was parked, the team took over the vehicle's 17-inch touchscreen and dashboard display. Keen's logo appeared on the screens, which appeared frozen and inoperable.
The team said there was no mechanical connection to the car's computer system, nor had they modified any part of the car.
Keen said it had reported its findings to Tesla, which in turn said it fixed the security holes quickly.
"The issue demonstrated is only triggered when the Web browser is used, and also required the car to be physically near to and connected to a malicious wifi hotspot. Our realistic estimate is that the risk to our customers was very low," the company said.
As more cars connect to the Internet and other computer networks, experts say, more hacking is inevitable.
The Department of Transportation and the National Highway Traffic Safety Administration on Tuesday released "guidelines" on autonomous cars and safety, which addressed, in part, cybersecurity.
The guidelines suggest that automakers follow "established best practices" to thwart hackers, and recommend that they report "any and all discovered vulnerabilities" whether they happen during testing or on the public roadways. Furthermore, "the entire process of incorporating cybersecurity considerations should be fully documented."
At this point, the guidelines are voluntary.
Separately, Elon Musk, Tesla's chief executive, tweeted that the company on Wednesday night will begin wireless updates to its Autopilot driver-assist feature.
Twitter: @russ1mitchell[4]
ALSO
Tesla battery contract shows how SoCal Edison is ramping up electricity storage[5]
Tesla Watch: Merger with SolarCity is challenged; Autopilot upgrade is panned[6]
Lyft president predicts a driverless future, says Tesla has it all wrong[7]
References
- ^ Tesla Motors (www.latimes.com)
- ^ Keen Security Lab (keenlab.tencent.com)
- ^ russ.mitchell@latimes.com (www.latimes.com)
- ^ @russ1mitchell (twitter.com)
- ^ Tesla battery contract shows how SoCal Edison is ramping up electricity storage (www.latimes.com)
- ^ Tesla Watch: Merger with SolarCity is challenged; Autopilot upgrade is panned (www.latimes.com)
- ^ Lyft president predicts a driverless future, says Tesla has it all wrong (www.latimes.com)
