04-19-2018, 03:13 PM
(04-19-2018, 03:03 PM)Au165 Wrote: Hacked again is a very broad term. As I explained taking information and forcing commands are very different things and require very different access. When we hear about hacking 90% of the time it is taking info not altering systems. Altering systems requires much higher levels of access to key components of systems that are usually locked down.Many things thrown out as far as taking over the cars functions would require changes to the Kernel and you can limit editing or updating of this to require an encryption key (which they probably already do). This would limit what can be done but you could also require updates to only be allowed through specific types of connections, which further assists in locking it down.
DDOS is not hacking, DDOS is what bored kids in Russian and China do to annoy others. You never actually enter a system with DDOS only take it off line making it inaccessible. I already laid out why it doesn't fit here, so it's kind of a moot point. Side note, DDOS by definition is not hacking as hacking is defined as modifying or altering software or hardware outside the designed intent. DDOS only blocks access to a system from some who'd like to use it, but it doesn't alter the system in anyway. It often times gets grouped with hacking but there is no actual hacking it is simply telling a lot of computers to try to visit a server in a very short amount of time. As I said before, hacking is a buzz word people throw around for a lot of things that by definition aren't hacking but sometimes done by people who also hack.
Again, a segmented and isolated system by definition can't be hacked by the outside because there is no outside as far as it is concerned. In an isolated environment a system can't be hacked just because it is next to a networked system, there has to be a bridge that also allows transferring of commands or programs. You could in fact isolate all critical systems and require updates to be ran either by key that can be delivered via uploading a physical device or through visiting dealers. This has been used in high level security device patching for years (Company I work for does this).
The other thing that could be implemented is a double blind encryption which basically makes this whole thing moot but is a bit more complex and costly to roll out at a scale like millions of cars. If you went the double blind route you could have a completely network connected car with practically no chance of interception outside of physically taking over the Key Generation Center. This is the kind of technology that is being developed to allow for online voting in the future.
I'll just say I have a lot of experience in systems that are network connected that have to maintain a high level of security. Again, there are far more effective and easy ways to cyber attack the U.S. right now.
a single car might be an isolated network but if everycar was a self driving car they would all be linked into the same network..
beyond the potential for something like a hacking incident. Theres the very simple aspect of The more you let technology do for you the less you know how to do and the less that is in your control.
