Dangerous control of my Jeep over the internet

[SwampNut]

LOL, what exactly is the fear? I get how ignorance of how technology works can cause fear, but what exactly do you think someone is going to do here? You know it's impossible for someone to park by your JT and then know what random network ID it has and hack it? Most someone could do, if they hacked the Guardian system which itself is unlikely, is to randomly unlock some vehicle somewhere?

Sponsored

 

[johnparjr]

Im sorry you are concerned but there really is no reason to be. Pretty much everything these days is connected and it is a great system "Well for me" I use it all the time

 

[pat11784]

A couple years ago they proved this could be done with toyota prius but it would apply to any vehicle with remote connection capabilities and could affect anything controlled electronically so ignition, power steering, throttle, braking, etc.

 

[SwampNut]

A couple years ago they proved this could be done with toyota prius but it would apply to any vehicle with remote connection capabilities and could affect anything controlled electronically so ignition, power steering, throttle, braking, etc.

Nope, what they did was totally different. There is currently no conceivable method that Guardian access could ever cross the security gateway module from start/lock control to anything important. Zero evidence of it, and no conceivable method to do it.

 

[DAVECS1]

Even if you deactivate it, it is still on the network. If you disable the transceiver, then you will get a network error. Most new cars are sending data back to the manufacturer. It is how vehicles are evolving so fast. It is not ideal and it is to some extent a ciolation of privacy, but one you forfiet when you purchase new. The positive side is there are a number of rules in place that protect you and your vehicles privacy. How they get followed is dicey. Uses of the data for crime and accident resolution, is not allowed unless consent is given, but I have seen that rule flexed a couple times.

There is not much one can do to hide in modern society if you use it. Your phone has you nailed and the post you made here gices your where abouts at a specific time and date.

 

[eaglerugby04]

Now that my service has expired I really would like a way to disable the ATT LTE modem it uses in there. But don't want to jack up my Uconnect. Not worried about a ton, but I just don't like the idea of it connecting an calling out for no reason

 

[Mr._Bill]

Now that my service has expired I really would like a way to disable the ATT LTE modem it uses in there. But don't want to jack up my Uconnect. Not worried about a ton, but I just don't like the idea of it connecting an calling out for no reason

It doesn't call out for no reason, it has a programmed list of reasons to communicate with the mothership. One of those is software updates for the Uconnect system.

 

[Gulf_coasterHTX]

Nice that yours worked. Tried so many times to get that system to work on cellular, wireless, etc. Nothing ever worked. A couple of times I actually needed the system to work were complete failures. So to me if you are paying for a system such as that for the reasons to be able to have it in time of need and it never works then there really is no need to pay to have it. Just seems to me from all the stuff I have read on it over the years its purely hit or miss who gets a good setup.

Yeah your info is out there already.. a while back someone took out some pay day loans under my name, I got a call from a collection agency asking me why I wasn’t paying my bills... HUGE pain getting it all fixed and removed from my record. I have a freeze on my credit now so any time someone tries to open a new line of credit I get a call to confirm personal info or else it won’t go through. I asked the cops where they got my info from and said somebody probably stole it from an insurance agency or something like that.

 

[SwampNut]

Attacks that expose stored personal information have very little to do with attacks that could allow control of a vehicle. This thread is full of misunderstanding of the many layers of services here that would all have to be cracked.

I've worked in network engineering, security, and servers for 25 years. I have absolutely no reservations about having this in my car.

 

[Gulf_coasterHTX]

Attacks that expose stored personal information have very little to do with attacks that could allow control of a vehicle. This thread is full of misunderstanding of the many layers of services here that would all have to be cracked.

I've worked in network engineering, security, and servers for 25 years. I have absolutely no reservations about having this in my car.

Agree completely, just sharing a personal experience

 

[jlrocks]

Attacks that expose stored personal information have very little to do with attacks that could allow control of a vehicle. This thread is full of misunderstanding of the many layers of services here that would all have to be cracked.

I've worked in network engineering, security, and servers for 25 years. I have absolutely no reservations about having this in my car.

As you surely know, software (especially this kind of proprietary software) is potentially vulnerable to attack in undiscovered ways (or discovered but secret ways in the case of SolarWinds and countless others) and punching a hole through another layer of security without user authorization only increases the attack surface. There is a lot more at stake here than unlock and remote start as @pat11784 rightly points out above, but most people won't believe it until it's on the front page.

 

[12BNNT]

Are we worried about “zombie vehicles” from fast and furious 8?

There was a demonstration years back where two guys hacked a Jeep Cherokee (regular not grand Cherokee) but they had to go into the uconnect on the vehicle first and get radio id’s and other info from inside the car and used a whole cart full of gear to do it. Not really feasible for someone to look at your car, tap a few keys on a laptop and start driving your car away.

As far as the uconnect functions, I had that on my challenger with the 8.4” (JT has the 7”) and it came in handy a few times. With cold weather outside I was able to remote start the car from the checkout line at Walmart or inside work and have a toasty warm car when I got there. Also went a few times where I was at home for the day working outside and wanted to grab something out of the car but my fob was inside. Phone was in my back pocket and able to unlock the car with that instead. Nicest thing about the system is (as my wife proved once) being able to look at your vehicle info without going outside to do it. The one night, when I mentioned getting gas at a really good price at a particular station that day, she looked up her car and said she was just below 1/2 tank so she would go there in the morning. I used it a few times to refresh my memory as to how close my mileage was to my next oil change being due.

 

[jlrocks]

Security and convenience are always a tradeoff.

 

[eaglerugby04]

Are we worried about “zombie vehicles” from fast and furious 8?

There was a demonstration years back where two guys hacked a Jeep Cherokee (regular not grand Cherokee) but they had to go into the uconnect on the vehicle first and get radio id’s and other info from inside the car and used a whole cart full of gear to do it. Not really feasible for someone to look at your car, tap a few keys on a laptop and start driving your car away.

As far as the uconnect functions, I had that on my challenger with the 8.4” (JT has the 7”) and it came in handy a few times. With cold weather outside I was able to remote start the car from the checkout line at Walmart or inside work and have a toasty warm car when I got there. Also went a few times where I was at home for the day working outside and wanted to grab something out of the car but my fob was inside. Phone was in my back pocket and able to unlock the car with that instead. Nicest thing about the system is (as my wife proved once) being able to look at your vehicle info without going outside to do it. The one night, when I mentioned getting gas at a really good price at a particular station that day, she looked up her car and said she was just below 1/2 tank so she would go there in the morning. I used it a few times to refresh my memory as to how close my mileage was to my next oil change being due.

Im surprised it worked that well for you in the challenger. Me and many other forum members never got ours to update accurately on a regular basis. My data at times was months old on the app. I found so little value out of the service I wouldn't even pay $1 a month for it.

Not worried at all about a zombie vehicle scenario at all. But like a hack like that proved could it be possible for somebody to kill your engine on the highway? yes. Is it likely, probably not.

 

[SwampNut]

There is a lot more at stake here than unlock and remote start

Nah, there's not. You only believe that because you don't actually understand how any of this works. And that's understandable too.

Sponsored