Tag Archive for: vehicles

Transportation security | Cloud solutions & mobile vehicles | Security News


Securing Intelligent Transportation Systems (ITS) in the transportation industry is multi-faceted for a multitude of reasons. Pressures build for transit industry players to modernise their security systems, while also mitigating the vulnerabilities, risks, and growth-restrictions associated with proprietary as well as integrated solutions. There are the usual physical security obstacles when it comes to increasingly integrated solutions and retrofitting updated technologies into legacy systems.

Starting with edge devices like cameras and intelligent sensors acquiring video, analytics and beyond, these edge devices are now found in almost all public transportation like buses, trains, subways, airplanes, cruise lines, and so much more. You can even find them in the world’s last manually operated cable car systems in San Francisco.

The next layer to consider is the infrastructure and networks that support these edge devices and connect them to centralized monitoring stations or a VMS. Without this layer, all efforts at the edge or stations are in vain as you lose the connection between the two.

And the final layer to consider when building a comprehensive transit solution is the software, recording devices, or viewing stations themselves that capture and report the video.

The challenge of mobility

However, the transportation industry in particular has a very unique challenge that many others do not – mobility. As other industries become more connected and integrated, they don’t usually have to consider going in and out or bouncing between networks as edge devices physically move. Obviously in the nature of transportation, this is key. Have you ever had a bad experience with your cellular, broadband or Wi-Fi at your home or office? You are not alone.

The transportation industry in particular has a very unique challenge that many others do not – mobility

Can you trust these same environments to record your surveillance video to the Cloud without losing any frames, non-stop 24 hours a day, 7 days a week, 365 days a year? To add to the complexity – how do you not only provide a reliable and secure solution when it’s mobile,…

Source…

Tesla Model X entry system security flaw allows vehicles to be stolen in minutes


A security flaw in Tesla Inc.’s Model X keyless entry system has been found to allow a would-be hacker to steal the vehicle in minutes.

Discovered by Lennert Wouters, a Ph.D. student at COSIC, a research group at the University of Leuven in Belgium, the hack involves exploiting a vulnerability in the way Tesla implements Bluetooth Low Energy in their Model X key fobs including support for firmware updates. The group revealed the exploit today.

The technique involves using a modified electronic control unit from a salvaged Model X to force key fobs to advertise themselves as connectable BLE devices. The BLE interface was found to be not properly secured through the update mechanism, allowing for the wireless takeover of the key fob to obtain valid codes to unlock the car.

“With the ability to unlock the car we could then connect to the diagnostic interface normally used by service technicians, ” Wouters explains. “Because of a vulnerability in the implementation of the pairing protocol we can pair a modified key fob to the car, providing us with permanent access and the ability to drive off with the car.”

Wouters discovered the vulnerability in the northern summer and reported it to Tesla in August. Tesla is said to be pushing out a software update this week to address the vulnerability hence Wouters is now releasing the details.

This isn’t the first time Tesla’s have been shown to be hackable. Researchers from COSIC have previously detailed how the keyless entry on the Tesla Model S can also be hacked. Past examples of Tesla getting hacking remotely included brakes in 2016.

“Automotive key fob attacks are real-world threats with significant impacts for automobile manufactures, law enforcement, vehicle finance companies and drivers,” Jacob Wilson, senior security consultant at electronic design automation firm Synopsys Inc., told SiliconANGLE. “With consumer demand for Bluetooth and internet-connected vehicle functionality on the rise, it’s more important than ever to ensure these technologies are secure.”

The research, he added, demonstrates the impacts of security requirements and…

Source…

Egyptian Government Plans To Track The Movement Of 10 Million Vehicles With Low-Cost RFID Stickers

Just under three years ago, Techdirt wrote about China’s plan to install satnav tracking devices on vehicles in Xinjiang. That was just one of several early signs of the human rights abuses happening there. Today, people are finally waking up to the fact that the indigenous turkic-speaking Uyghur population is subject to some of the harshest oppression anywhere on the planet. Tracking huge numbers of vehicles might seem to be a typically over-the-top, money-no-object Chinese approach to total surveillance. Unfortunately, there are signs the idea is starting to spread, as this story in RFID Journal explains:

Egypt’s Ministry of Interior (MOI) plans to identify millions of vehicles as they travel on the country’s roads, using an RFID solution from Go+, with hardware and software provided by Kathrein Solutions in cooperation with Wireless Dynamics. The system, which will be implemented across approximately 10 million of the country’s vehicles throughout the next five years, consists of passive UHF RFID stickers attached to each car’s windshield, as well as tags on headlamps that respond to interrogation from readers installed above roadways, even at high speeds.

One justification for the move is to provide information on traffic flows. Another is to identify drivers who have been found guilty of traffic violations, and who should therefore not be on the roads. But plans to send all the data to a cloud-based data center will create a database that will eventually track every vehicle in the country. That will clearly be an invaluable resource for the country’s police and security forces, which unfortunately seem to take China’s approach to anyone who voices opposition to the authorities. Here’s what Human Rights Watch wrote in its most recent report on the country:

Since President Abdel Fattah al-Sisi secured a second term in a largely unfree and unfair presidential election in March, his security forces have escalated a campaign of intimidation, violence, and arrests against political opponents, civil society activists, and many others who have simply voiced mild criticism of the government. The Egyptian government and state media have framed this repression under the guise of combating terrorism, and al-Sisi has increasingly invoked terrorism and the country’s state of emergency law to silence peaceful activists.

As well as the negative impact on human rights in Egypt, there is another troubling aspect to this move. According to the RFID Journal article, the company providing the new system, Go+, is “in discussions with four other countries about the possibility of implementing this solution once the Egyptian system is fully deployed.” China’s mass tracking of the Uyghurs in Xinjiang using satnav devices pioneered the idea of carrying out vehicle surveillance on a hitherto unseen scale, regardless of the cost. Egypt’s use of the much cheaper RFID trackers represents a worrying evolution of the idea. If the roll-out is successful, it could encourage other governments to adopt a similar approach, to the detriment of civil liberties in those countries.

Follow me @glynmoody on Twitter, Diaspora, or Mastodon.

Permalink | Comments | Email This Story

Techdirt.

Car alarms with security flaws put 3 million vehicles at risk of hijack – TechCrunch

Car alarms with security flaws put 3 million vehicles at risk of hijack  TechCrunch

Two popular car alarm systems have fixed security vulnerabilities that allowed researchers to remotely track, hijack and take control of vehicles with the alarms …

“HTTPS hijacking” – read more