Using Tire Pressure Sensors To Spy On Cars 203
AngryDad writes "Beginning last September, all vehicles sold in the US have been required to have Tire Pressure Monitoring System (TPMS) installed. An article up at HexView enumerates privacy issues introduced by TPMS, and some of them look pretty scary. Did you know that traffic sensors on highways can be adopted to read TPMS data and track individual vehicles? How about an explosive device that sets itself off when the right vehicle passes nearby? TPMS has been discussed in the past, but I haven't seen its privacy implications analyzed before. Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."
Finally, an April Fools story!!! (Score:3, Insightful)
Re: (Score:3, Insightful)
How about another easy fix. Just disable the fscking thing.....
Re: Finally, an April Fools story!!! (Score:3, Interesting)
"Fortunately the problem is easy to fix: encrypt TPMS data the way keyless entry systems do."
Yeah, encryption would stop the little hacker down the street and keep them from setting up a road side explosive set just for you, but it wouldn't stop the government -- who would mandate a backdoor -- from doing it.
And personally, I'm not really worried about the hacker down the street...if cars start blowing up I would bet money it would be government doing it...and not a foreign government, but our governme
Re: Finally, an April Fools story!!! (Score:5, Funny)
I'm glad to see that there's other right-minded folk like me on here! Keep up the good work Mr. Transporter!
Re: (Score:2)
oblig. Buckaroo Bonzai quote (Score:3, Funny)
Re: (Score:2)
Yeah, I soooooo hear ya on that one! You know what else scares me? Clowns. The government keeps saying that there's nothing to fear from clowns, but I know The Truth! Those colourful costumes and goofy makeup are the perfect disguises for Secret Service death squads, prowling our neighbourhoods and looking to assassinate or brainwash anyone they see purchasing organic tomatoes. It's downright terrifying!
Too fucking right! Clowns are scary as shit!
http://www.youtube.com/watch?v=qDFmNgmaEe0 [youtube.com]
Better solution (Score:2)
Headline: Tire PMS kills! Story at 11! (Score:3, Funny)
This isn't an 4/1 joke, is it?
Part of me feels paranoid now... (Score:5, Funny)
How about an explosive device that sets itself off when the right vehicle passes nearby?
Great, first I have to worry about the tolls on I-44 through Oklahoma, now I got to worry about exploding vehicles?
Maybe in the future we can all roll to work in giant hamster balls. Getting groceries home will be a bitch tho...
Re:Part of me feels paranoid now... (Score:5, Funny)
Yeah, I learned this the hard way. Just make sure the food is enclosed in metal containers so the hamsters can't get to it.
Re:Part of me feels paranoid now... (Score:5, Interesting)
Fast forward to now. One might scan the sensors on a target vehicle as it drives a common route, emplace IEDs on multiple routes, and break out the popcorn (or pita as the case may be) until the target drives by. This would be ideal for political hits where the target uses a specific armored vehicle.
http://www.german-way.com/aherrhsn.html [german-way.com]
"Maybe in the future we can all roll to work in giant hamster balls."
That would be quite a hamster.
Re:Part of me feels paranoid now... (Score:4, Insightful)
The real fun is who first thought of it
http://www.timesonline.co.uk/tol/news/uk/crime/article1530661.ece [timesonline.co.uk]
Re:Part of me feels paranoid now... (Score:4, Funny)
I would not be afraid of such nasty things happening in an decent god-fearful rule obiding English Speaking country. This has long been taken care of through the amendments to the school and university curriculum. And if worst comes to worst control orders can be used from people taking high school chemistry courses: http://news.bbc.co.uk/1/hi/uk/7107265.stm [bbc.co.uk]
Re: (Score:2)
Fast forward to now. One might scan the sensors on a target vehicle as it drives a common route, emplace IEDs on multiple routes, and break out the popcorn (or pita as the case may be) until the target drives by. This would be ideal for political hits where the target uses a spe
Re: (Score:2)
The bicyclist wasn't there, just the bicycle.
Re: (Score:2)
Being a terrorist doesn't automatically imply "lunacy" or technical incompetence.
One may be smart, intelligent, capable, willing to kill political enemies, and willing to study in order to do it with style. A copperplate charge was old news, so were the sensors, so was the ability to measure the distances required. Putting them together was the nifty bit, but certainly not beyond educate
Hamsters (Score:3, Informative)
Didn't hamsters solve that by carrying food in their cheeks?
Re: (Score:2)
Re: (Score:2)
RFID tracking (Score:5, Insightful)
Of course, cars also come with this thing called a "license plate", which can also be tracked remotely and wirelessly.
Basically, if you drive, you can be tracked.
President authorizes warrentless tire tapping... (Score:5, Funny)
The government won't use this information to track you down to that seedy little motel on the side of route 9, where you cavort with no less than 3 women other than your wife. We only care about catching bad guys. Your wife however...
If you have nothing to hide, you have nothing to fear but fear itself.
Re:President authorizes warrentless tire tapping.. (Score:2)
I think your missing the main point here...
Re: (Score:2)
And another thing, No one was ever charged with terro
Re: (Score:2)
I don't know about "wirelessly" unless you are talking about people using their eyeballs. Eyesight detection isn't at all efficient and certainly not automated. However, there are non-wireless camera systems that can be used to more automatedly detect license plate numbers. Although, from my understanding, that hasn't really been perfected yet. Using RFID combined with detectors at ever
Re:RFID tracking (Score:5, Informative)
So do license plate readers, and they can operate from greater distances and completely passively. Cost for a license plate reader is about the same as a good RFID reader, and they are probably at least as reliable. Furthermore, you are required to keep your license plate readable.
Some cities are already starting to implement complete license plate-based tracking of vehicles.
Re: (Score:2)
London uses license plates to charge you if you drive into the inner city. The solution is simple: get a sheet magnet (http://www.custom-magnets.com/Adhesive_magnet_rolls.htm) and print a fake license plate on paper. Stick the paper to the magnetic sheet, and slap that puppy over your real license plate. Removal is easy, just
Re: (Score:2)
The readers check for this and compare the license plate against the actual model of car you're driving; you'll be stopped half a mile later for driving with an illegal license plate.
Reusable, and you have plausable deniability, too, since 'anyone' can stick something on the outside of your car....
It's your responsibility to ensure before you get in your car that your l
Re:RFID tracking (Score:4, Informative)
Re: (Score:2)
Re: (Score:2)
It isn't. Even the ANPR systems they use in petrol stations to help catch people who drive off without paying have a reliability of about 60%, and they're trying to hit a stationary plate in an approximately known location every time.
I've never seen one that could read the number plate on my car, and that's just a standard (albeit old standard) UK number plate. I've seen an ANPR system get the first three letters and the last letter right,
Re: (Score:2)
Re:RFID tracking (Score:5, Informative)
I don't know about "wirelessly" unless you are talking about people using their eyeballs.
These cameras have been around for over 10 years, and I assure you, are highly accurate.
Re: (Score:2)
I don't understand why they aren't used for catching regular speeding violations too. Catching someone with a radar gun doing 107kph in a 100kph zone is dumb. Catching someone moving between point a and point b in 5.5 minutes, where point a and point b are 10km apart, equating to an average speed of ~110kph is much smarter - there is no doubt that the car in question was traveling over the speed limit for a sustained per
Re: (Score:3, Insightful)
You are assuming that there are no discontinuities in the space-time continuum. I never leave home without my wormhole generator.
Re: (Score:2)
I realize that you were joking, but I'd like to add: whenever I'm on a turnpike (the kind where yo
Re: (Score:3, Informative)
Re: (Score:2)
Doing any other kind of tracking requires a lot more effort tham putting a primitive scanner under a manhole cover or something.
Re: (Score:3, Informative)
Of course you could always surround your tires in tin foil if you are THAT paranoid.
Re:RFID tracking (Score:5, Funny)
Of course you could always surround your tires in tin foil if you are THAT paranoid.
Re: (Score:2)
I considered that, but it would take one big freaking microwave....
Re: (Score:2)
No problem. I already make my popcorn in 5 pound bags.
-
Re: (Score:2)
Re: (Score:2, Informative)
Re: (Score:2)
Re:RFID tracking (Score:5, Insightful)
Re:RFID tracking (Score:4, Insightful)
Huh? (Score:4, Insightful)
In what way is tracking a person's possessions NOT a damned effective way of tracking the person?!?!
Do complete strangers drive your car often? So you see no need for concern until a tracking device is implanted directly into your skull?
Re: (Score:2)
Without shoes.
Or clothes.
Except for my tinfoil hat.
Re: (Score:2)
Re: (Score:3, Funny)
Re: (Score:2)
Re: (Score:2)
Not much range on such scanners.
"Cars probably also emit all sorts of other unique signals that can be recognized and tracked."
Car electronics systems are well understood. Only a system with a car-specific signature that emitted a strong enough signal would be practical to exploit.
"Of course, cars also come with this thing called a "license plate", which can also be tracked remotely and wirelessly."
License plate scanners must h
Re: (Score:2)
Re: (Score:2, Funny)
By George, I think you've got it!
Re: (Score:2, Funny)
Re: (Score:3, Insightful)
I am guarnateed totally 100% anonymity anywhere I go in public! It's a guarnateed right in the USA Constitution. Don't give me any of this "I can see you" bS!!!!!!!!
Being seen and identified by a person or agent of the government on the street is one thing - that's how its been for thousands of years.
Having every movement of every person on the street automatically recorded, indexed and cataloged into nationwide databases without the any human intervention is a completely different matter - that's a recipe for totalitarianism.
Right now, we are rapidly barreling down the road from how its been for thousands of years to the ultimate totalitarian state with very little g
Slashdotted? (Score:2)
Hmmm.... (Score:4, Insightful)
Outside of Lebanon, I don't see this as being a huge concern. (And calling it a "privacy" issue seems a bit of an understatement.) The local governments aren't sufficiently motivated to fill potholes, let alone install IEDs specifically targeted at me.
Re: (Score:2)
But that's where the potholes come from!!!!!
An easier solution... (Score:2, Insightful)
Re: (Score:2)
The "solution" is not so simple. (Score:3, Insightful)
Unfortunately, there is a major difference here: failure to encrypt keyless entry resulted in stolen cars (something which caught people's attention and pissed them off), whereas you'll never even notice that your TPMS isn't encrypted. People are incredibly lazy and only take action when they perceive a threat to their person or property. Liberty? As Dick Cheney would say, "So?"
I'll bet adding encryption would cost the manufacturers $0.01 per tire (or some equally trivial amount), which they will claim will ruin them. Nobody else (except for a bunch of whiny, personal liberty freaks) will care about this and it will quietly become ubiquitous.
Besides, if you aren't doing anything illegal, why should you care who takes note of your comings and goings. We're here to help you and we certainly can't do that unless we know where you are ... at all times ...
Re: (Score:3, Interesting)
People are incredibly lazy and only take action when they perceive a threat to their person or property. Liberty?
While I understand your frustration, I think it's ultimately misleading to tag people as "lazy" here. Misleading precisely because I tend to agree with you: most folk are "lazy", but that the term is so loaded with negative connotation that it stops further inquiry. Human beings are likey terribly poorly adapted to understanding and reacting to these kinds of threats. Many modern threats are really pretty damn abstract (to an essentially hunter-gatherer mind, anyhow) and require a fair bit of abstract t
Re:The "solution" is not so simple. (Score:5, Interesting)
In this case there's no reason for each tire pressure sensor to be broadcasting one. All they need to do is chirp back the pressure inside the tire. That's it. Give them enough power to hit a receiver located in the wheel (which might be 4-6" away in a very large tire, probably a lot closer than that, and it's all inside the steel-belted tire) and call it a day. Unless you are playing Ben Hur, you're not going to get close enough to another car's tires for it to become a problem -- use a high frequency and you're going to get a substantial bit of attenuation via the tire itself, and then you're decreasing as the square of the distance through free space. You're never going to have more than one valve-stem sensor per wheel-mounted receiver, so why bother with it?
If you really do need a weak form of identification, rather than hardcoding a UID, it would be pretty trivial to have each sensor randomly choose a number from a range such that the chance of collisions was low (deriving the randomness from resistor noise or by oversampling whatever analog sensor they use to determine pressure) and reset periodically or each time the car is started. That eliminates the problem of having to coordinate UIDs and prevent duplicates (cf. the cheap Bluetooth transceivers that caused problems because their MAC-ish addresses were all zeros). Every unit can be completely identical.
On further consideration, I can't really imagine why the designers of the TPMS would have given each sensor a UID (especially since it would probably cause confusion when you rotate tires, if the car's computer tracks them)
Re: (Score:2)
How about the situation where a tire fails while driving? You run over a sharp object and puncture the tire, but don't notice it. I once had a tire deflate completely while driving - the tire was basically loose on the rim, but it really didn't make much difference in how the car drove at low speeds. Had I then driven at high speeds it could have been disastrous. On long trips in particular TPMS could be life-saving.
When I've been out walking in the
Choose your role models carefully (Score:2, Interesting)
Can we get a car analogy for this? (Score:4, Funny)
Bubbling up from the lower levels (Score:3, Interesting)
ABS Sensor (Score:3, Interesting)
Re: (Score:2)
Re: (Score:2, Funny)
Re: (Score:2)
Probably not a 4/1 story. (Score:4, Informative)
http://www.tireindustry.org/pdf/TREAD_Act_Summary.pdf [tireindustry.org]
Looks to me that no one is requiring continual monitoring (and reporting) of tires' conditions; only when the tire pressure falls below 25% of recommended cold pressure is a signal required to be sent (and I see nothing about being able to tell which car in a fleet has the problem from outside the car itself).
Finally, article summary should say "all NEW vehicles sold in the US" require the system, not "all vehicles sold in the US".
proposed that if a vehicle is using a direct system (with sensors in each
tire sending a signal to the dashboard) the TPMS does not have to trigger
until the tire is 25 percent below the recommended cold psi. An indirect
TPMS (that runs off the anti-lock braking system) does not have to
trigger until the tire is 30 percent below the recommended cold psi for
that tire. TIA is strongly opposed to NHTSA's supposed "safety"
regulation which in effect allows the motoring public to drive on severely
underinflated tires. TIA has supported a petition that NHTSA mandate
reserve inflation pressure in tires to offset the TPMS rule. [See letter to
NHTSA supporting petition.]
Re: (Score:2)
What will the next new law be? Heated leather seats are mandatory? So much for this freedom thing I hear so much about.
Re: (Score:2)
Except, at the end of the day, the problem was really all about people driving with overloaded vehicles on underinflated tires. And however foolish this is (it's all because people don't fucking pay attention to the manner in which they operate and maintain their death machines), the guffaw cost Ford, Firestone, and the government (and thus the People) a lot of money.
In direct re
I'm starting to like... (Score:2)
The article missed something (Score:2)
1) Safety (mentioned in the article)
2) Fuel economy. Proper tire pressure can result in a 5-10% increase in MPG.
Encryption may not help. (Score:2)
Re: (Score:2)
Re: (Score:2)
I've worked on trackside sensors in the railroad industry, and we found the most reliable way to recognize a train was by measuring the timing of the wheels as the passed the sensor. Optical scanners would have been a last resort. The union wouldn't let us put transponders on the trains, or we'd have done that.
Having every car transmitting a unique easily-fingerprinted signal? That'd make things so easy. It does
How the new TPMS sensors work. (Score:2, Informative)
Not good for criminals (Score:2, Funny)
Run flat tires need TPMS (Score:4, Insightful)
"Good Morning, Senator Smith" (Score:2)
The way to get this changed would be to put a roadside detector near some Washington freeway, near a programmable billboard. Make a deal with the billboard operator to buy time on demand, and, when a known car goes by, put up "Good Morning, Senator Smith".
Monitoring = Courteous Drivers (Score:2)
But just lately I realized, they have traffic cameras all over the place!!!
You know how you drive when you have a cop behind you? Well, those Brits ALWAYS have a cop behind them.
And you know what? I am not concerned with speeding or brea
Re: (Score:2)
Re: (Score:2)
Identification does not need VIN (Score:2)
Re: (Score:2)
You're just playing with semantics (Score:2)
Tyre ids will be tracked by tyre vendors for insurance/warrantee purposes. Just add a license plate reader and the connection between the tyres and the license is made. Once there is a tie up between the tyre ids and the vehicle you have identificatio
Re: (Score:2, Funny)
Um, don't you mean tin foil rims?
Re: (Score:3, Funny)
Re: (Score:3, Interesting)
Re: (Score:2)
However, one of their advertised features is that if you get in a crash they can initiate a connection and attempt to talk to you--if you can't respond, they can automatically contact police/whoever. I would imagine that's why they have the ability to monitor the ambient sound in your car.
Re:OnStar (Score:5, Funny)
Clearly OnStar causes accidents.
Re: (Score:2)
Or get rid of the nanny state law requiring TPMS. They give drivers a false sense of security regarding their tires, help them to justify paying even less attention to the state of their cars and required maintenance,
Oh sure, now my mod points expire...
15 years ago, when I was pulling wrenches, I was amazed at how oblivious most people are to basic preventative maintainence.
I can't count how many engines I've seen where it takes 2 liters of oil to get up to the add oil line on the dipstick.
Or how many tires I've seen at less than 10 PSI.
I've always said a basic maintainence test should be part of the driver's licensing testing process.
Re: (Score:2)
Just sayin'
Personally, I want all cars to have pressure sensors and an auto fill for the tire. We would use about 20% less gas with properly inflated tires.
Re: (Score:2)
Re: (Score:2, Insightful)