Feeds

Satnav hacking made simple

Create your own traffic jam, bull fight or air raid

Build a business case: developing custom apps

CanSecWest A pair of hackers have demonstrated a way to spoof travel information messages displayed on satellite navigation systems used by Italian drivers to bypass accidents, traffic jams and plot the most efficient routes from one point to another.

The hack is so simple it's hard to believe no one has shown it off before. It uses inexpensive, off-the-shelf gear to inject RDS-TMC (radio data system-traffic message channel) data that is digitally coded into FM signals that many satnav systems use to receive travel information in real time. While the technique could be used for ill intent, Andrea Barisani, one of two researchers from Inverse Path who presented the hack at the CanSecWest conference in Vancouver, swears his goals were much more benign.

"The whole point is you can actually get laid," Barisani declared. He was alluding to video he had just rolled depicting Daniele Bianco, Barisani's partner in the demo, ambling down an unpaved road with a ravishing young woman. Based on the input from their 2006 Honda's integrated natsav, the two become stranded in the middle of nowhere. Upon learning an evil hacker brandishing an FM antenna is responsible, the young woman, so impressed with his power, quickly takes up with him.

Beyond an RDS encoder (price tag: $40), an FM transmitter and a hand-held antenna, the hackers needed the codes used to denote a particular event (e.g. an accident, parade or bull fight), and the event's location - information that can be easily learned from online sources. The strength of the FM signal can be augmented for long-range hacks that target a large number of drivers or more narrowly for those that aim to single out someone in particular.

Depending on the event invoked, the driver may receive a pop up notification (e.g. airplane crash or bomb alert), or the notification may not be displayed. But even in the latter case, the spoofed alert has the potential to mislead a satnav user. For example, an injection reporting a road has been closed will cause the satnav to recalculate a route to avoid the closure.

The injection is trivial to carry out. While TMC specs employ encryption, it is used for discrimination and not authentication, and the key can be broken by sampling a small amount of data. Also facilitating injection: terminals that use encryption are still expected to accept unencrypted data.

In addition to the FM band, TMC is also supported over digital audio broadcast and satellite radio, but those mediums are likely harder to exploit for injections. Microsoft DirectBand, an FM subcarrier used for MSN Direct, is a closed system that employs more robust encryption, also making it look promising, Barisani said. ®

The essential guide to IT transformation

More from The Register

next story
Rupert Murdoch says Google is worse than the NSA
Mr Burns vs. The Chocolate Factory, round three!
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
Know what Ferguson city needs right now? It's not Anonymous doxing random people
U-turn on vow to identify killer cop after fingering wrong bloke
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.