Can an MP3 hack your car?

March 18, 2011 by Katie Gatto weblog

Can an MP3 hack your car?

Enlarge

(PhysOrg.com) -- The idea that someone can get into your car without your permission isn't a new one. It's about as old as the coat hanger, but that was back in the days when you locks had a pull up button. We tend to think that digital car locks are safer, because it takes a higher level of sophistication to get into them, when Physorg reported on it in January, it was security professionals who were stealing the cars, but now it may be easier to boost you car, with the most innocuous of devices.

Researchers at the University of California, San Diego led by Stefan Savage, and Tadayoshi Kohno of the University of Washington, who have been looking at the vulnerabilities in electronic vehicle controls have found that cars that are built to be compatible with Bluetooth have the potential to be hacked using that connection.

The Bluetooth connection, which is designed to let your car and your phone work well together has the potential to be exploited in ways that would allow a less than scrupulous individual to upload to your car using an audio file. So, a song could literally give your car a virus. If you want to go one creepier, the researchers also found ways to pair the cars to a Bluetooth-enabled devices in order to execute that malicious code. So someone could be controlling your car, without you ever knowing it. The code can even be snuck in on an MP3. Burned onto a CD player, and put into your car. When the song is played becomes a and can then alter the car's firmware, giving it access to the car's key systems.

The researchers would not comment on which model of car they had conducted this research on, only that it was a 2009 sedan with fewer than the average car, but we do know it was not a luxury car.

© 2010 PhysOrg.com

3.3 /5 (3 votes)  

Filter


Move the slider to adjust rank threshold, so that you can hide some of the comments.


Display comments: newest first

Tainted
Mar 18, 2011

Rank: not rated yet
That's really cool. Someone keeps breaking into my dads Jeep and stealing his cds. He asked if I could put a virus on a burned cd to screw over whoever is stealing his cds. Now, that may be a possibility assuming the thief has a nice car and uses the cd.
6_6
Mar 18, 2011

Rank: 5 / 5 (1)
but it's relying on the fact the mp3 be loaded on a vulnerable device.. also do your poor dad a favor and buy him something better than a cd player lol
blazingspark
Mar 18, 2011

Rank: not rated yet
This is silly, I've been in the IT industry for a while and I don't see how any device which plays audio files would suddenly start executing code. There is a big difference between reading and executing. Sounds like the implementation is buggy or this article is just taking advantage of scaring clueless people.
hard2grep
Mar 19, 2011

Rank: not rated yet
I could see this a possibly true; The question is how the computer in the car is set up. If you can run diagnostics thru the cd player, then it is easy to take control of the computer. But.. I could have swore that the only way to boot the computer would be through an auxiliary dongle. You can use a disk to modify older xboxes, but I cannot see the auto industry leaving such a large hole in security in light of all the car modding available now.
BillFox
Mar 19, 2011

Rank: 2 / 5 (1)
This is silly, I've been in the IT industry for a while and I don't see how any device which plays audio files would suddenly start executing code. There is a big difference between reading and executing. Sounds like the implementation is buggy or this article is just taking advantage of scaring clueless people.


I am in the same industry as you are, and apparently you're not up to par with security vulnerabilities. I remember some 5 years ago when people could hack a cell phone within bluetooth range to charge them ten bucks a minute on any calls. Bluetooth allows an interface to your stereo but what is your deck wired to? Possibly other computer systems?
blazingspark
Mar 22, 2011

Rank: not rated yet
I am in the same industry as you are, and apparently you're not up to par with security vulnerabilities. I remember some 5 years ago when people could hack a cell phone within bluetooth range to charge them ten bucks a minute on any calls. Bluetooth allows an interface to your stereo but what is your deck wired to? Possibly other computer systems?
I am well aware of security vulnerabilities. Still playing mp3's is very different to hacking a wireless network connection like bluetooth. Network connections provide access to services which execute code - providing many openings to exploit.
In a properly implemented system the bluetooth interface would be limited in what it can do on the hardware level. Why would a stereo need access to the cars central locking mechanism?
Also, this article was talking about hacking via an mp3 file. This is very different.. What kind of mp3 player executes code embedded in an mp3? It would just detect it is a damaged file and stop the playback!
Rank 3.3 /5 (3 votes)
Relevant PhysicsForums posts

More news stories

SpotterRF debuts Radar Backpack Kit (w/ Video)

(Phys.org) -- SpotterRF has announced a special radar backpack kit designed to enhance situational awareness for soldiers on the ground. The company says its special radar is designed for warfighters as part ...

Technology / Hi Tech & Innovation

created 16 hours ago | popularity 5 / 5 (3) | comments 12 | with audio podcast report

Probability of contamination from severe nuclear reactor accidents is higher than expected: study

Catastrophic nuclear accidents such as the core meltdowns in Chernobyl and Fukushima are more likely to happen than previously assumed. Based on the operating hours of all civil nuclear reactors and the number ...

Technology / Energy & Green Tech

created May 22, 2012 | popularity 3.6 / 5 (21) | comments 53 | with audio podcast

Delphi gasoline-injection engine technique rivals hybrid's edge

(Phys.org) -- Running a diesel like engine on gasoline is something Delphi is doing in notable fashion. They claim they are on to a promising way to enjoy an engine that gives the vehicle owner high efficiency ...

Technology / Energy & Green Tech

created May 21, 2012 | popularity 4.7 / 5 (18) | comments 37 | with audio podcast report

HyperSolar shows dirty water no barrier to power world

(Phys.org) -- The Santa Barbara, California, company, HyperSolar, is set to transparently share the ups and downs of its research experiences toward the company’s ultimate vision, successfully producing ...

Technology / Energy & Green Tech

created May 24, 2012 | popularity 4.8 / 5 (15) | comments 17 | with audio podcast report

Tesla to launch electric sedan in US on June 22

Tesla Motors said Tuesday it would begin deliveries of "the world's first premium electric sedan" on June 22, slightly ahead of schedule.

Technology / Energy & Green Tech

created May 22, 2012 | popularity 4.5 / 5 (11) | comments 18


Dell tablet leak: 10.1-inch display, two-battery choice

(Phys.org) -- Headline after headline talks about vendors’ tablets in the wings as likely number-one contenders for the iPad. Such claims have justifiably been taken with a grain of salt, considering ...

Scientist: Evolution debate will soon be history

(AP) -- Richard Leakey predicts skepticism over evolution will soon be history. Not that the avowed atheist has any doubts himself.

SpaceX capsule has 'new car' smell, astronauts say (Update)

SpaceX's Dragon cargo vessel smells like a new car, said astronauts at the International Space Station after opening the hatches Saturday following the spacecraft's landmark mission to the orbiting lab.

Keep food safety in mind this memorial day weekend

(HealthDay) -- Picnics, parades and cookouts are as much a part of Memorial Day weekend as tributes to the United States' war veterans.

Thousands of shellfish found dead in Peru

Thousands of crustaceans were found dead off the coast of Lima following the mystery mass death of dolphins and pelicans, the Peruvian Navy said Friday.

Astronomers seize last chance in lifetime for Venus Transit

Astronomers are gearing for one the rarest events in the Solar System: an alignment of Earth, Venus and the Sun that will not be seen for another 105 years.