Pwn2Own Automotive
Sakamakon farkon taron Pwn2Own Automotive an sanar da kwanan nan, wanda aka gudanar sama da kwanaki uku a taron Duniya na Automotive a Tokyo kuma a cikinsa an bayyana raunin 49 da ba a san su ba a dandali na infotainment na motoci, tsarin aiki da na'urorin cajin abin hawa na lantarki.
A Pwn2Own Automotive 2024 an ba da lada don rashin ƙarfi a cikin rukunan hada da: Tesla, In-Vehicle Infotainment (IVI), Electric Vehicle Chargers da Aiki Systems. Kowane nau'i yana da tsarin manufofin da mai takara zai iya zaɓa yayin aikin rajista. Duk shigarwar dole ne su lalata na'urar kuma su nuna aiwatar da lambar sabani akan na'urar.
da an kai harin ne ta hanyar amfani da sabuwar firmware da tsarin aiki, tare da duk abubuwan ɗaukakawa da ke akwai kuma a cikin tsarin tsoho.
Adadin kudaden da aka biya ya zarce dalar Amurka miliyan 1.3s, tare da ƙungiyar Synacktiv tare da ribar dala dubu 450. Wadanda suka yi nasara a matsayi na biyu (fuzzware.io) sun sami $177,500 kuma wadanda suka yi nasara a matsayi na uku (Midnight Blue) sun sami $80,000.
A yayin gasar, An nuna hare-hare da dama, ciki har da:
- Hacks guda biyu na mahalli dangane da rarrabawar Linux Automotive Grade, waɗanda aka ba su da $47,500 da $35,000. Mahalarta biyu sun soke buƙatun su na kai hari ga EMPORIA EV Charger Level 2 da kuma dandamalin Linux Grade Automotive.
- Nuna kutse na tsarin infotainment na motar Tesla, wanda aka ba shi kyautar dala 100,000 a kowane amfani da ke tattare da jerin kwari biyu.
- Kutse na modem da aka yi amfani da shi a cikin motar Tesla tare da tukuicin $100,000 ga kowane amfani da ke tattare da jerin bugs uku.
- Hacks biyar na tsarin infotainment dangane da dandalin Sony XAV-AX5500 wanda aka ba shi da $40,000, $20,000, $20,000, $20,000 da $10,000
- Hacking na tsarin infotainment dangane da dandalin Pioneer DMH-WT7600NEX ($40,000 a kowane amfani da ya ƙunshi jerin kurakurai guda uku).
- Hacks guda shida zuwa tsarin infotainment dangane da dandamalin Alpine Halo9 iLX-F509 ($ 40,000 don amfani da ƙwaƙwalwar ajiya da aka riga aka saki, $ 20,000 don raunin maye gurbin umarni, $ 20,000 don raunin ɓarna mai ɓarna, $ 20,000 don cin gajiyar, kuskuren sarkar $ 20,000 kowane amfani da ya ƙunshi jerin kurakurai biyu, $ 10,000 a kowane amfani da ke tattare da jerin kurakurai biyu).
- Hacks guda biyu na tashar caji ta tashar Ubiquiti Connect EV ($ 60,000 da $30,000 don cin gajiyar da suka haɗa da sarkar kwari biyu).
- Uku hacks na Phoenix Contact's CHARX SEC-3100 tashar caji ($ 60,000 don cin gajiyar da ke tattare da sarkar kurakurai biyu, $30,000 don raunin da ke da alaƙa da ƙarancin tabbatar da bayanan shigarwa, $ 30,000 don cin gajiyar da ya ƙunshi sarkar kurakurai uku, $22,500 yi amfani da sarkar kurakurai guda biyu, $26,250 don cin gajiyar sarkar kurakurai guda hudu).
- Hack EMPORIA EV Charger Level 2 tasha caji ($60,000 don cin gajiyar da ya haɗa da ambaliya).
- Hacks hudu na tashar cajin JuiceBox 40 Smart EV ($ 60,000 don cin gajiyar sarkar kurakurai biyu, $30,000 don ambaliya, $ 30,000 don ambaliya, $15,000).
- Hacks bakwai akan tashar cajin Flex na ChargePoint, yana ba ku damar gudanar da lamba a matakin firmware na na'urar ($ 60,000, $ 30,000, $ 30,000, $ 16,000, $ 16,000, $ 16,000, $ 5000).
- Hacks uku na tashar cajin kasuwanci ta Autel MaxiCharger AC Wallbox ($ 30,000 don cin riba mai yawa, $ 30,000 don cin gajiyar sarkar da ba ta dace ba, da $22,500 don cin gajiyar sarkar rasa biyu).
- Ƙoƙari goma na hacking na na'urori daga cikin su: Sony, Phoenix, Contact, Pioneer, Alpine da sauransu, waɗanda suka gaza.
Yana da mahimmanci a nuna cewaCikakkun bayanai kan duk alamun rashin lahani na ranar sifili za a buga bayan kwanaki 90, yana ba masana'antun lokaci don shirya sabuntawa waɗanda ke gyara waɗannan raunin, daidai da sharuɗɗan hamayya.
Daga karshe idan kai neMai sha'awar ƙarin koyo game da shi, zaka iya duba mahaɗin mai zuwa inda zaku sami ƙarin bayani game da ayyukan a cikin kwanaki uku na Pwn2Own Automotive.