I'm sure a lot of you heard the reports over the last couple years, of an unaltered car (Jeep Grand Cherokee being just one) being successfully hacked remotely via the internet -- not only to control the entertainment systems, but the driving systems as well. Here's a WIRED article: Hackers Remotely Kill a Jeep on the Highway—With Me in It | WIRED Here's a YouTube of them doing it successfully: (This resulted in Fiat/Chrysler having to recall their cars to upgrade the security). But I was wondering... with a car such as the Prime where there's so many electronic controls, is there any part of the car that could be vulnerable to hacking remotely? Is the car in any way connected to the Internet? One would think not --- but then.. one would think not for a Jeep Grand Cherokee too, right? But hackers found a way to hack in using the internet, being miles away. So I'm wondering... security precautions aside, how different or similar the Prime really is, from the Jeep Grand Cherokee in this regard?
Entune uses your phone as an intermediary. One would have to hack the phone app, then use the hacked phone app to attack the infotainment system. Done well, there is no connection between the infotainment system and the car controls. If I was suspicious I would look at the CAN bus. Jeep used the same system for operation and infotainment. In the Prius, as the Wired article mentions, you need physical access to the OBDII connector under the dash. Entune uses Bluetooth from your phone to the car, it has a typical range of 10 feet. only your phone is doing Wifi or SMS. Only take phone updates from Toyota. CAN bus - Wikipedia
i think it can be done, but i wouldn't worry about it until it starts happening. of course, the mfgs will come up with something to stop it.
Actually on the Advanced there is a cellular connection. It is used for the safety connect and for other features. This means there is a path into the system, but it is fairly likely that they have done some work to protect the endpoints over what was talked about in this report. I think that there are other limitations in the Toyota system over the Jeep system. The Toyota system is capable of adjusting temp, charging and other basic functions but some functions are disabled if the car is running. You can't adjust climate if the car is running, you can't get charging details if the car is running. This means that while your friend may be able to turn up the climate control remotely on your parked car so that when you get in in the summer it is 110F inside your car instead of a more reasonable temp, it is not really dangerous. Other than vehicle tracking, it is not clear what features the Safety Connect system offers the remote operator. Can they turn off the vehicle forcing it off the road? Can they force on the brake? Some of these features are added to newer vehicles as theft protection, and the trade off is that means they are exposed in some way to an open network.
Hmm, the prime advanced does have an lte modem in it... Disclaimer: baseless speculation. My premium hasn't rebooted, have had it since Feb Edit: oops, sorry, meant to put this in the most recent rebooting radio thread
