Stealing vehicles via CANBUS wiring apparently is a real thing.

[colinl]

Article really is about Toyota but it mentions Ford and others use CANBUS (which of course is true).
https://jalopnik.com/car-thieves-hack-can-bus-headlight-wire-bluetooth-1850307214

The article is fair, the original post linked in it is a lot more interesting. https://kentindell.github.io/2023/04/03/can-injection/

I hope Ford has implemented some security regarding critical functions in CANBUS and the cellular modem telematics. People that park outdoors overnight are obviously at the highest risk but if there is an easy to reach CANBUS connector in a vehicle with decent ground clearance it would not take long to connect to it even if you only parked briefly.

Sponsored

 

[commadorebob]

I skipped the Jalopy article given their penchant to being wrong. But the research is interesting. Sounds like an easy fix if Ford hasn't already implemented it. Obviously, Ford isn't going to say either way because it's best to not tell thieves how your locks work.

 

[skyhawk]

another good reason to hide a $20 airtag on your vehicle - they can be tracked almost anywhere in the world. Not that it would help you recover it from Africa, but at least you'd know where to send postcards

 

[colinl]

another good reason to hide a $20 airtag on your vehicle - they can be tracked almost anywhere in the world. Not that it would help you recover it from Africa, but at least you'd know where to send postcards

A professional car thief is obviously going to be aware of that and in my opinion easily going to be able to mitigate that.

I would guess a stolen Maverick would get quickly stripped rather than transported and sold intact.

 

[Tailender]

Battery disconnect. Can't steal a car with no power. A little inconvenient but if you live in a high crime area, might be a good idea.

 

[commadorebob]

A professional car thief is obviously going to be aware of that and in my opinion easily going to be able to mitigate that.

I would guess a stolen Maverick would get quickly stripped rather than transported and sold intact.

Yep. By carrying an iPhone that will tell them there is an Airtag traveling with them. They are designed to specifically do that.

 

[Waterick]

I would guess a stolen Maverick would get quickly stripped rather than transported and sold intact.

I would normally agree on this for most vehicles. However, current demand for Maverick parts is low compared to demand for entire Mavericks.

 

[Hardening2753]

Yep. By carrying an iPhone that will tell them there is an Airtag traveling with them. They are designed to specifically do that.

Get a Tile. But just pull a fuse

 

[Skyline]

Who wants to bet, that the car manufacturers will just kick the CAN down the road?

The CAN (Controller Area Network) bus reminds me of my early day working with networks, like 10Base-T with COAX and Ethernet cabling. These networks were half-duplex, collision detection (CSMA/CD) networks, that had been easy to exploit and take over the network. In the CSMA/CD network only one device can talk at any given time, and other devices receive the message as well.

CAN bus on cars have the same network architecture, including the lack of security to prevent exploits. Why would car manufacturer opt for this network architecture? The primary purpose had been to save on wiring/copper. While some of the firmware updates might be able to eliminate some of the CAN bus exploits, in my view this won't last long. For a real change, car manufactures need to update the CAN bus to full-duplex network.. That's not going to happen for another 5 - 10 years, if it ever will...

 

[My1stFord]

Who wants to bet, that the car manufacturers will just kick the CAN down the road?

The CAN (Controller Area Network) bus reminds me of my early day working with networks, like 10Base-T with COAX and Ethernet cabling. These networks were half-duplex, collision detection (CSMA/CD) networks, that had been easy to exploit and take over the network. In the CSMA/CD network only one device can talk at any given time, and other devices receive the message as well.

CAN bus on cars have the same network architecture, including the lack of security to prevent exploits. Why would car manufacturer opt for this network architecture? The primary purpose had been to save on wiring/copper. While some of the firmware updates might be able to eliminate some of the CAN bus exploits, in my view this won't last long. For a real change, car manufactures need to update the CAN bus to full-duplex network.. That's not going to happen for another 5 - 10 years, if it ever will...

You had me at your CANalogy

Sponsored