To steal today’s computerized cars, thieves go high-tech

A laptop is one of car thieves’ go-to tools. Lorado/iStock via Getty Images

Doug Jacobson, Iowa State University

These days, cars are computer centers on wheels. Today’s vehicles can contain over 100 computers and millions of lines of software code. These computers are all networked together and can operate all aspects of your vehicle.

It’s not surprising, then, that car theft has also become high-tech.

The ones and zeros of getting from A to B

The computers in a vehicle can be divided into four categories. Many computers are dedicated to operating the vehicle’s drive train, including controlling the fuel, battery or both, monitoring emissions and operating cruise control.

The second category is dedicated to providing safety. These computers collect data from the vehicle and the outside environment and provide functions like lane correction, automatic braking and backup monitoring.

The third category is infotainment systems that provide music and video and can interface with your personal devices through Bluetooth wireless communications. Many vehicles can also connect to cellular services and provide Wi-Fi connectivity. The final category is the navigation system, including the car’s GPS system.

Computers in one category often need to communicate with computers in another category. For example, the safety system must be able to control the drive train and the infotainment systems.

One difference between the network in your car and a typical computer network is that all devices in the car trust each other. Therefore, if an attacker can access one computer, they can easily access other computers in the car.

As with any new technology, some aspects of today’s cars make it harder for thieves, and some make it easier. There are several methods of stealing a car that are enabled by today’s technology.

Hijacking wireless keys

One of the high-tech features is the use of keyless entry and remote start. Keyless entry has become common on many vehicles and is very convenient. The fob you have is paired to your car using a code that both your car and fob know, which prevents you from starting other cars. The difference between keyless entry and the remotes that unlock your car is that keyless entry fobs are always transmitting, so when you get near your car and touch the door, it will unlock. You had to press a button for old fobs to unlock the car door and then use your key to start the car.

The first keyless fobs transmitted a digital code to the car, and it would unlock. Thieves quickly realized they could eavesdrop on the radio signal and make a recording. They could then “replay” the recording and unlock the car. To help with security, the newest fobs use a one-time code to open the door.

Thieves can hijack your car’s wireless key fob even when it’s in your home.

One method of stealing cars involves using two devices to build an electronic bridge between your fob and your car. One person goes near the car and uses a device to trick the car into sending a digital code used to verify the owner’s fob. The thief’s device sends that signal to an accomplice standing near the owner’s home, which transmits a copy of the car’s signal. When the owner’s fob replies, the device near the house sends the fob signal to the device near the car, and the car opens. The thieves can then drive off, but once they turn the car off they cannot restart it. Carmakers are looking to fix this by ensuring the fob is in the car for it to be driven.

Hacking the network

The network used by all computers in a car to communicate is called a controller area network bus. It’s designed to allow the computers in a car to send commands and information to each other. The CAN bus was not designed for security, because all of the devices are assumed to be self-contained. But that presumption leaves the CAN bus vulnerable to hackers.

a diagram of a car overlaid with a series of boxes connected by lines, with a cartoon of a hooded person usingf a laptop
Your car has a computer network, and like most networks, it can be hacked. Electronic control units (ECUs) are sets of computer chips that control the various systems in your car. Khatri, Shrestha and Nam, CC BY

Car thieves often try to hack into the CAN bus and from there the computers that control the car’s engine. The engine control unit stores a copy of the wireless key code, and thieves can clone this to a blank key fob to use to start the victim’s car. One method is accessing a car’s onboard diagnostics through a physical port or wireless connection meant for repair technicians. Thieves who access the onboard diagnostics gain access to the CAN bus.

Another network hacking method is breaking through a headlight to reach the CAN bus via a direct wiring connection.

Throwback attack

Modern thieves also try the USB hack, which exploits a design flaw in Hyundai and Kia vehicles. This is more of an old-style hot-wiring of a car than a high-tech computer issue. It is named the USB hack because when thieves break into a car, they look for a slot in the steering column. It turns out that a USB connector fits into the slot, and this allows you to turn on the ignition.

So all someone has to do is break the window, insert a USB connector and start the car. This technique has become infamous thanks to a loose affiliation of young car thieves in Milwaukee dubbed the Kia Boyz who have gained notoriety on TikTok.

Hyundai and Kia have issued an update that closes the vulnerability by requiring the fob to be in the car before you can start it.

Limiting your car’s vulnerability

Given there are so many different car models, and their complexity is increasing, there are likely to continue to be new and creative ways for thieves to steal cars.

So what can you do? Some things are the same as always: Keep your vehicle locked, and don’t leave your key fob in it. What is new is keeping your vehicle’s software up to date, just as you do with your phone and computer.The Conversation

Doug Jacobson, Professor of Electrical and Computer Engineering, Iowa State University

This article is republished from The Conversation under a Creative Commons license. Read the original article.



Today’s Hottest Deals: Save BIG on EVGA X20 Wireless Gaming Mouse, Duracell AA and AAA Batteries, Otamatone Japanese Electronic Musical Instrument, and MORE!

For today’s edition of “Deal of the Day,” here are some of the best deals we stumbled on while browsing the web this morning! Please note that Geeks are Sexy might get a small commission from qualifying purchases done through our posts (as an Amazon associate or a member of other affiliate programs.)

EVGA X20 Wireless Gaming Mouse (16,000 DPI, 5 Profiles, 10 Buttons)$69.99 $19.99

Logitech G435 Wireless Gaming Headset (Black)$79.99 $49.88
Logitech G435 Wireless Gaming Headset (Blue and Pink)$79.99 $29.99

Duracell Coppertop AA + AAA Batteries, 56 Count Pack (28 AA + 28 AAA)$45.29 $25.49
Duracell Coppertop AAA Batteries, 28 Count Pack$25.49 $15.52
Duracell Coppertop AA Batteries, 28 Count Pack$37.99 $20.00

Otamatone Japanese Electronic Musical Instrument$49.99 $31.98

Save on FITVII Fitness Trackers

Microsoft Office Professional 2021 for Windows: Lifetime License + FREE Microsoft Training Bundle$239.99 $49.99

The All-in-One Microsoft Office Pro 2021 for Windows: Lifetime License + Windows 11 Pro Bundle$418.99 $49.97

Up to 28% Off on Pillows and Cushions by Purple

Up to 41% off School Supplies from Amazon Basics

Up to 32% off Cheerios, Planters Mixed Nuts, and more Lunch Box Essentials

Save Big on Musical Instrument from KK Music Store (Violins, Sax, Trumpet, Clarinet, Flute, etc.)

Why Do Americans Insist on Playing Hide-and-Seek with the Metric System?

If you grew up in the United States, you probably learned the United States Customary System (USCS) for weights and measures. USCS terms like inches, feet, pounds, and miles are derived from the British Imperial System, steeped in a long history of application and use. Any introduction to the metric system may have muddied the measurement waters, adding unfamiliar words and awkward conversions to your school day.

[Weird History]

What’s in vapes? Toxins, heavy metals, maybe radioactive polonium

Shutterstock

Alexander Larcombe, Telethon Kids Institute

If you asked me what’s in e-cigarettes, disposable vapes or e-liquids, my short answer would be “we don’t fully know”.

The huge and increasing range of products and flavours on the market, changes to ingredients when they are heated or interact with each other, and inadequate labelling make this a complicated question to answer.

Analytical chemistry, including my own team’s research, gives some answers. But understanding the health impacts adds another level of complexity. E-cigarettes’ risk to health varies depending on many factors including which device or flavours are used, and how people use them.

So vapers just don’t know what they’re inhaling and cannot be certain of the health impacts.

What do we know?

Despite these complexities, there are some consistencies between what different laboratories find.

Ingredients include nicotine, flavouring chemicals, and the liquids that carry them – primarily propylene glycol and glycerine.

Concerningly, we also find volatile organic compounds, particulate matter and carcinogens (agents that can cause cancer), many of which we know are harmful.

Our previous research also found 2-chlorophenol in about half of e-liquids users buy to top-up re-fillable e-cigarettes. This is one example of a chemical with no valid reason to be there. Globally, it’s classified as “harmful if inhaled”. Its presence is likely due to contamination during manufacturing.

How about polonium?

One potential ingredient that has been in the news in recent weeks is radioactive polonium-210, the same substance used to assassinate former Russian spy Alexander Litvinenko in 2006. The Queensland government is now testing vapes for it.

Polonium-210 can be found in traditional cigarettes and other tobacco products. That’s because tobacco plants absorb it and other radioactive materials from the soil, air and high-phosphate fertiliser.

Whether polonium-210 is found in aerosols produced by e-cigarettes remains to be seen. Although it is feasible if the glycerine in e-liquids comes from plants and similar fertilisers are used to grow them.

It’s not just the ingredients

Aside from their ingredients, the materials e-cigarette devices are made from can end up in our bodies.

Toxic metals and related substances such as arsenic, lead, chromium and nickel can be detected in both e-liquids and vapers’ urine, saliva and blood.

These substances can pose serious health risks (such as being carcinogenic). They can leach from several parts of an e-cigarette, including the heating coil, wires and soldered joints.

Colourful, disposable vapes on a blue background
Chemicals from the device itself can end up in our blood, urine and saliva. Shutterstock

That’s not all

The process of heating e-liquids to create an inhalable aerosol also changes their chemical make-up to produce degradation products.

These include:

  • formaldehyde (a substance used to embalm dead bodies)

  • acetaldehyde (a key substance that contributes to a hangover after drinking alcohol)

  • acrolein (used as a chemical weapon in the first world war and now used as a herbicide).

These chemicals are often detected in e-cigarette samples. However due to different devices and how the samples are collected, the levels measured vary widely between studies.

Often, the levels are very low, leading to proponents of vaping arguing e-cigarettes are far safer than tobacco smoking.

But this argument does not acknowledge that many e-cigarette users (particularly adolescents) were or are not cigarette smokers, meaning a better comparison is between e-cigarette use and breathing “fresh” air.

An e-cigarette user is undoubtedly exposed to more toxins and harmful substances than a non-smoker. People who buy tobacco cigarettes are also confronted with a plethora of warnings about the hazards of smoking, while vapers generally are not.

How about labelling?

This leads to another reason why it’s impossible to tell what is in vapes – the lack of information, including warnings, on the label.

Even if labels are present, they don’t always reflect what’s in the product. Nicotine concentration of e-liquids is often quite different to what is on the label, and “nicotine-free” e-liquids often contain nicotine.

Products are also labelled with generic flavour names such as “berry” or “tobacco”. But there is no way for a user to know what chemicals have been added to make those “berry” or “tobacco” flavours or the changes in these chemicals that may occur with heating and/or interacting with other ingredients and the device components. “Berry” flavour alone could be made from more than 35 different chemicals.

Flavouring chemicals may be “food grade” or classified as safe-to-eat. However mixing them into e-liquids, heating and inhaling them is a very different type of exposure, compared to eating them.

One example is benzaldehyde (an almond flavouring). When this is inhaled, it impairs the immune function of lung cells. This could potentially reduce a vaper’s ability to deal with other inhaled toxins, or respiratory infections.

Benzaldehyde is one of only eight banned e-liquid ingredients in Australia. The list is so short because we don’t have enough information on the health effects if inhaled of other flavouring chemicals, and their interactions with other e-liquid ingredients.

Where to next?

For us to better assess the health risks of vapes, we need to learn more about:

  • what happens when flavour chemicals are heated and inhaled

  • the interactions between different e-liquid ingredients

  • what other contaminants may be present in e-liquids

  • new, potentially harmful, substances in e-cigarettes.

Finally, we need to know more about how people use e-cigarettes so we can better understand and quantify the health risks in the real world.The Conversation

Alexander Larcombe, Associate Professor and Head of Respiratory Environmental Health, Telethon Kids Institute

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Today’s Hottest Deals: Samsung 990 PRO Series 1TB SSD (For Your PS5!), LEGO Icons Orchid Plant Building Set, JBL Tune 230NC Noise Cancelling Earbuds, and More!

For today’s edition of “Deal of the Day,” here are some of the best deals we stumbled on while browsing the web this morning! Please note that Geeks are Sexy might get a small commission from qualifying purchases done through our posts (as an Amazon associate or a member of other affiliate programs.)

Samsung 990 PRO Series – 1TB PCIe Gen4. X4 NVMe 2.0c – M.2 Internal SSD (Perfect for you PS5!)$169.99 $79.99

LEGO Icons Orchid 10311 Artificial Plant Building Set with Flowers$49.99 $40.00

COB Mini Keychain Multi-Function Flashlight (Up to 1,000 Lumens!)$21.99 $14.99

JBL Tune 510BT: Wireless On-Ear Headphones with Purebass Sound$49.95 $29.95

JBL Tune 230NC TWS True Wireless In-Ear Noise Cancelling Headphones$99.95 $49.95

Xbox Series X – Diablo® IV Bundle$559.99 $519.99

Big Sale on Under Armour Backpacks (Most Have Laptop Sleeves Inside!)

Vantrue E1 Lite 1080P WiFi Mini Dash Cam with GPS and Speed$99.99 $71.98

Vantrue N2S 4K Dash Cam with GPS, Front and Inside Dual 2.5K$209.99 $167.97

Microsoft Office Professional 2021 for Windows: Lifetime License + FREE Microsoft Training Bundle$239.99 $49.99

The All-in-One Microsoft Office Pro 2021 for Windows: Lifetime License + Windows 11 Pro Bundle$418.99 $49.97

Arnold Schwarzenegger Sings About Anger as Mr. Rogers

I love Brian Monarch’s videos featuring deepfake Arnold Schwarzenegger playing the role of other actors in popular movies or TV shows. Here he is as Mr. Rogers singing about anger. You’re welcome.

Brian monarch’s Arnold videos might be the best things since sliced bread!