[image from hackgadgets]

Crashed web sites, stolen credit card info — imagine seeing the damage caused by Internet viruses and worms unleashed on a fleet of vehicles. The results could include vehicle location data used with malicious intent, the prevention of a plug-in vehicle battery from recharging, remote starting of a car, or even — as a disgruntled young former car salesman in Texas has demonstrated this week — stranding drivers with a car that won’t start and a horn that won’t quit.

Here’s what happened in Texas, as Wired and the Austin News report: A terminated employee from a car dealership called the Texas Auto Center logged into the company’s web-based system and was able to remotely wreak havoc on more than 100 vehicles. The dealership’s system is able to disable the starter system and trigger incessant horn honking for customers that have fallen behind on car payments. It’s meant to serve as an alternative to repossessing the vehicle, and the ex-Texas Auto Center employee, arrested Thursday on charges of computer intrusion, was able to set off the horn command at will and make it so drivers couldn’t start their cars.

Cars are growing ever more connected to communication networks, and upcoming generations of electric vehicles will take it a step further with connections to the power grid. Already, electric car makers have unveiled smartphone apps designed to let users to remotely control certain vehicle functions and battery charging. Down the road, we’ll likely see not only electricity flowing to cars from the grid, but also the flow of data between cars, the grid, home energy management systems, utilities and third-party service providers.

As Ford’s director of connected services Doug VanDagens told us recently (GigaOM Pro, subscription required), “For electric vehicles, connectivity to the web and data are “required over and above what gas engines require.” Apps can use data — about topography, traffic, battery and vehicle health, infrastructure availability, driving behavior — to help orient drivers in the nascent world of electric mobility, both in and out of their vehicle.

While these tools and technologies could help reduce fuel consumption, make electric vehicles more convenient, and enable utilities to prevent excess strain on the power grid as plug-in cars create new demand, that shift to an increasingly digital transportation system brings with it (as Katie has explained in the context of the smart grid buildout) one of the banes of the Internet: hacking.

The stakes, of course, are very different. Certainly nobody wants a virus on their PC. But the prospect of a hacker seizing control of some aspect of a car — a ton of metal capable of going 60-plus MPH, that costs tens of thousands of dollars, and that maybe has a battery in its belly that requires a sophisticated system of thermal controls – is a far scarier thought.

The potential consequences of cyber attacks on a digital power grid could be similarly frightening. Andy Karsner said back in 2008, when he was with the Department of Energy: “This isn’t the cyber-attacking that you think of just for passwords. This is the capacity to destroy hardware in your home, at airports, at military bases, your car, if its connected through the grid.”

We should note that remote immobilization systems like the one involved in the Austin incident have been in use for a decade or more, and yet we have not seen vehicles crippled en masse by hackers. But companies should realize this could be a sensitive issue among consumers, while both companies and regulators need to recognize risks that go along with the transition to increasingly digital and connected systems for transportation and power.

Related News : Hacker Disables More Than 100 Cars Remotely

[earth2tech]