Re: [Discuss-gnuradio] GNU Radio & USRP help reveal Security and Privacy Vulnerabilities of In-Car Wireless Networks

[Eric Blossom]

On Wed, Aug 11, 2010 at 04:56:10PM +0200, Patrick Strasser wrote:
> Hello!
> 
> FYI:
> Just found an article at a German computer news site (Golem)[1]
> about a paper by Ishtiaq Rouf and Rob Miller from University of
> South Carolina and Rutgers University about Security and Privacy
> Vulnerabilities of In-Car Wireless Networks[2].
> They used GNU Radio and USRP to record the traffic between the tire
> pressure sensors and the car.
> 
> Patrick
> 
> [1] http://www.golem.de/1008/77111.html
> [2] http://www.winlab.rutgers.edu/~Gruteser/papers/xu_tpms10.pdf

Thanks Patrick!

Among other things, they can query the in-the-clear unique ID of each
tire sensor at distance and speed, as well as spoof the replies from
the tire sensor to the ECU.

Nothing like a "safety feature" that enables specific vehicles to be
identified at a distance...  In the same class of brilliance that
enabled "I sense a Country X RFID passport nearby"...

Eric