Hacker News new | ask | show | jobs
by merkaloid 2561 days ago
Don't see anywhere in the article that this was _responsibly_ disclosed to automakers. They're literally publishing how to kill people on the road for the sake of making a buck (company seems to peddling spoof resistant GNSS).
5 comments

There's nothing to disclose. Tesla and everyone knows their system is vulnerable, and knows that the solution is that the driver of the car is responsible for driving the car, which prevents this attack from succeeding. Also it's not anymore dangerous than Google maps telling you to make a wrong turn or a map being out of date. Navigation is not a safety feature.
In the article it says that it makes the car drive recklessly, brake checks in the middle of the highway and zigzagging across lanes. I'm not sure how you can equate that to Google maps showing you an out of date map.

Also, even if this isn't new information, that doesn't excuse them from writing an article with dangerous information, I don't recall getting bomb making instructions in the New York Times...

Go to your local library and check out the "Anarchists Handbook^wCookbook" then. It's about as equally available as your average blog post.
> check out the "Anarchists Handbook"

Cookbook?

This isn't "killing" anyone, the car simply pulled off onto a small piece of paved ground adjacent the main road instead of at the intended exit. Despite the fact that the title does its best to make you THINK the car just drove off the road into a ditch.

More importantly, responsible disclosure would be necessary, if it weren't for the fact that this attack would work with pretty much any GPS tech.

No killing, ideally, but getting lost maybe. The car should use its optics to stay on SOME road no matter what; in this case maybe it didn't stay on the RIGHT one.
> Don't see anywhere in the article that this was _responsibly_ disclosed to automakers

What makes this irresponsible:

> Prior to the Model 3 road test, Regulus Cyber provided its Model S research results to the Tesla Vulnerability Reporting Team

It's not exactly new information.