Cybersecurity expert Robert Siciliano discusses how hackers can compromise modern cars through wireless vulnerabilities. A live demo shows a Corvette controlled via iPhone, and the conversation covers Tesla's driverless taxi plans and why manufacturers need to patch systems before malicious actors exploit them.
Chapters
But first, reports that Tesla may take on Uber with a driverless taxi, but a dangerous Corvette hack may stop their plans in their tracks.
Well, there are reports that Tesla may take on Uber with its own taxi service using driverless electric cars, but an iPhone hack may stop all of them in their tracks. Here we go.
Um, start moving. Sending brake command. Stop. Okay, so here we go, starting our slow 5-mile-an-hour cruise. Sending the command. And we brake.
Robert Siciliano is with me now, cybersecurity expert. So Robert, are you concerned about Tesla after the Corvette hack?
Absolutely, I'm concerned about any moving vehicle being remotely controlled by Whether it's a security researcher or potentially a criminal hacker, we all should be concerned about that.
Okay, so what specifically are the vulnerabilities? Is the problem that as cars get more wired, as the Tesla Model is implied to be, that they become more vulnerable?
It is actually as they become more wireless, and the fact that they have wireless entertainment systems that can be accessed via Wi-Fi, the Internet of Things being incorporated into cars and planes and trains and so so forth, all of these peripheral devices in some way, shape, or form can be reverse engineered, tampered with, and allowing that vehicle to be hacked in some way, shape, or form.
Okay, now the hackers that are working on these particular projects are so-called friendly hackers. They are doing this as part of research or maybe to make a name for their own firm. But do you think that other, let's say, bad hackers have an interest in getting access to these systems?
Well, see, that's the thing. You know, right now, the majority of these hacks have occurred in a controlled environment, where you have professional security penetration testers seeking out these vulnerabilities, whatever their motivation might be. And right now, you know, they would respond to the manufacturer and say, "Hey, you've got this issue," and the manufacturer would quickly respond and issue a patch. That is a good thing. But when criminals become aware of this and they go ahead and reverse-engineer these issues, then people could potentially die. So it's very important that, um, all the manufacturers of all these different technologies make sure that their own people are, uh, investigating their own technologies so that it doesn't get into the hands of the bad guy.
All right, so it seems like more auto companies will be reaching out to more cyber, uh, experts as, uh, they seek to increase their employee base on that front. Robert, thank you so much for joining us. Robert Siciliano joining us there, cybersecurity expert.
