http://www.wired.com/2015/07/hackers-re ... p-highway/
Turns out the Uconnect info-tainment system has cellular access via Sprint. For convenience or something. It also has various controller modules accessible from it with REWRITABLE firmware.
Charlie Miller (of PWN-to-OWN fame) and Chris Valasek were able to use this connection to upload custom firmware that let them access the drivetrain's CAN bus. THROUGH THE INTERNET. From the comfort of their couch, they were then able to:
- Track the vehicle with GPS
- Read all sensor data
- Control the instrument panel
- Control the audio system, including locking out the in vehicle controls
- Control the throttle and lock out driver control
- Turn off the engine and lock out driver control
- Put the transmission in neutral and lock out driver control
- Disable or apply the brakes
- Control the vehicle steering when in reverse (for now)
Chrysler (Fiat) has a patch, but it can only be applied via a USB stick or dealership using their fancy laptops.
Time to keep driving my (nearly) pre-internet car.