Here's an interesting paper on the potential insecurities inherent in modern automotive communications systems:
http://www.autosec.org/publications.html

It looks like the target vehicle in this case is a Chevy, but many of the same concepts and potential vulnerabilities would be common to other platforms as well. Makes me want to get out a CAN-bus sniffer and go try to turn things of/off with the ODBII port...

Dan

_________________

2005 Silver CRD Limited
245/75R16 GoodYear Duratracs
Fumoto drain | ProVent CCV Filter
Stanadyne FM100 filter | Cummins fuel pump
GDE Eco | SEGR | BoulderBars | FrankenLift | Frankenskids

That just makes me dread how dependent modern day vehicles are on electronics. When you can't stop a vehicle no matter how hard you press the brake, something is wrong with the design.

_________________
'06 Renegade

One thing to note is that the lychpin of the whole scenario was the fact that there's a device that bridges the low-speed (non-critical) and high-speed(critical) CAN buses. Other than the BCM, there shouldn't be one that does that... but OnStar talks on both, and if the protocol itself has no security mechanism built in (and there's no way to verify authenticity of messages on CAN), then you're screwed.... makes me not ever want to buy a product with celular uplink technology. I'll keep that in my pocket.

Dan

_________________

2005 Silver CRD Limited
245/75R16 GoodYear Duratracs
Fumoto drain | ProVent CCV Filter
Stanadyne FM100 filter | Cummins fuel pump
GDE Eco | SEGR | BoulderBars | FrankenLift | Frankenskids