Black Hat experts in Las Vegas address hacking cars, medical devices

Security experts at the Black Hat conference Thursday in Las Vegas sought to alleviate fears about the ease of hacking autonomous cars.

Other conference speakers, though, sent heart rates higher over the vulnerability of implanted medical devices, like pacemakers.

The two discussions were part of about 80 sessions held at Black Hat at Mandalay Bay for more than 17,000 industry professional to learn about the latest threats to networks and connected devices as well as solutions to defeat them.

Charlie Miller and Chris Valasek, vehicle security architects for San Francisco-based Cruise Automation, said hacking autonomous ride-sharing cars will be more difficult than believed as automakers reduce the number of ways a vehicle software system can connect with users, and as owners regularly update operating systems. Cruise is helping General Motors develop a fleet of autonomous cars.

Miller and Valasek said self-driving cars will also include devices that are expensive and not available to the general public, making it harder for hackers to get their hands on to analyze.

“It’s hard to hack the car when you don’t have the hardware, software and radars,” Valasek told hundreds of attendees at the session.

Update security flaws

Several groups have remotely hacked semi-autonomous cars over the years, including a Tesla, raising concerns about the security of fully autonomous cars. Miller and Valasek said they remotely hacked a Jeep Cherokee in 2015, taking control of the automobile’s operations.

The first self-driving vehicles will likely be owned and operated by corporations, such as ride-sharing companies, they said.

The corporations will have the ability to update any software security flaws the day they become available across their fleet, Miller and Valasek told the audience.

Manufacturers of autonomous ride-sharing cars can reduce the ability of hackers to gain control by removing potential remote access points like Bluetooth, they said.

Companies owning cars would also be able to monitor the engine control units in each vehicle and stop the car — or prevent it from starting — if any unauthorized changes have been made to it.

Hackers need to break through two, three, or even four security blocks to remotely gain access to a car today. By increasing the strength at each level, companies can make hackers’ “return on investment so low” that some won’t even bother, Valasek said.

“I think we are doing a pretty good job right now,” he said about the industry’s progress to stop remote hacking.

However, the situation changes when the fully autonomous car is owned by an individual, who may not regularly update security flaws.

“It’s a harder problem” to resolve and not something Cruise is focused on at the moment, he said.

Pacemakers, insulin pumps

Jonathan Butts, founder of QED Secure Solutions, and Billy Rios, founder of WhiteScope, demonstrated that they could alter the operation of implanted medical devices such as pacemakers as well as insulin pumps.

The two said they found flaws that allowed them to increase or halt delivery of insulin as well as alter the pulses sent by pacemakers.

Butts and Rios told the audience they found vulnerabilities in four of the major pacemaker devices, but added people should nonetheless use them as the health benefits outweigh the cybersecurity risks.

“Most vendors are trying to do the right thing, but the industry has a long way to go,” said Butts.

Contact Todd Prince at 702-383-0386 or tprince@reviewjournal.com. Follow @toddprincetv on Twitter.

News
Educators dressed in red have taken to the streets to demand more for their students.
Educators dressed in red have taken to the streets to demand more for their students. Educators from around the State are bringing the Red for Ed movement to the steps of the Nevada Legislature in Carson City, NV, and to the Grant Sawyer Building in Las Vegas. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @bizutesfaye
Nature Conservancy Ranch
The Nature Conservancy just bought the 900-acre 7J Ranch at the headwaters of the Amargosa River, north of Beatty. The property could become a research station, though ranching will continue.
Swift water rescue at Durango Wash in Las Vegas
On Thursday, February 14, 2019, at approximately 8:42 a.m., the Clark County Fire Department responded to a report of a swift water incident where people were trapped in the Durango wash which is located near 8771 Halcon Ave. Personnel found one person who was trapped in the flood channel. The individual was transported to the hospital in stable condition. Video by Clark County Fire & Rescue.
Flooding at E Cheyenne in N. Las Vegas Blvd.
Quick Weather Around the Strip
Rain hits Las Vegas, but that doesn't stop people from heading out to the Strip. (Mat Luschek/Review-Journal)
Aaron Semas, professional bull rider, talks about his traumatic brain injuries
Aaron Semas, professional bull rider, talks about his traumatic brain injuries. The Cleveland Clinic will begin researching the brains of retired bull riders to understand the impact traumatic brain injuries have on cognition. (Bizuayehu Tesfaye/ Las Vegas Review-Journal) @bizutesfaye
Matt Stutzman shoots arrows with his feet
Matt Stutzman who was born without arms shoots arrows with his feet and hits the bullseye with remarkable accuracy. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @bizutesfaye
Secretary of Air Force Emphasizes the Importance of Nellis AFB
US Secretary of the Air Force Heather Wilson visited Nellis Air Force Base during Red Flag training and described how important the base is to the military.
Former Northwest Academy student speaks out
Tanner Reynolds, 13, with his mother Angela McDonald, speaks out on his experience as a former student of Northwest Academy in Amargosa Valley, which includes abuse by staff member Caleb Michael Hill. Hill, 29, was arrested Jan. 29 by the Nye County Sheriff’s Office on suspicion of child abuse.
Former Northwest Academy students speak out
Tristan Groom, 15, and his brother Jade Gaastra, 23, speak out on their experiences as former students of Northwest Academy in Amargosa Valley, which includes abuse by staff and excessive medication.
Disruption At Metro PD OIS Presser
A man claiming to be part of the press refused to leave a press conference at Metro police headquarters, Wednesday January 30, 2019. Officers were forced to physically remove the man. (Mat Luschek/Review-Journal)
Clients at Las Vegas’ Homeless Courtyard talk about their experience
Clients at Las Vegas’ Homeless Courtyard talk about their experience after the city began operating around the clock. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @bizutesfaye
Las Vegas parts ways with operator of homeless courtyard
Jocelyn Bluitt-Fisher discusses the transition between operators of the homeless courtyard in Las Vegas, Thursday Jan. 24, 2019.(Caroline Brehman/Las Vegas Review-Journal)
Las Vegas police and Raiders partner with SafeNest
Las Vegas police and the Raiders partner with SafeNest on Project Safe 417 (the police code for domestic violence is 417). The program partners trained SafeNest volunteer advocates with Metropolitan Police Department officers dispatched to domestic violence calls, allowing advocates to provide immediate crisis advocacy to victims at the scene of those calls. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
North Las Vegas police chief discusses officer-involved shooting
North Las Vegas police chief Pamela Ojeda held a press conference Thursday, Jan. 24, regarding an officer-involved shooting that took place on Jan. 21. The incident resulted in the killing of suspect Horacio Ruiz-Rodriguez. (Mat Luschek/Las Vegas Review-Journal)
Volunteers gather for annual Clark County homeless count
Volunteers gather for the annual Southern Nevada Homeless Census, Tuesday, Jan. 22, 2019. (Chase Stevens/Las Vegas Review-Journal)
Who can understand hospital price lists?
Lists of costs for procedures, drugs and devices are now posted the websites of hospitals to comply with a new federal rule designed to provide additional consumer transparency. Good luck figuring out what they mean.
People in Mesquite deal with a massive power outage
People in Mesquite respond to a major power outage in the area on Monday, Jan. 21, 2019. (Mat Luschek/Las Vegas Review-Journal)
Group helping stranded motorists during power outage
A group of Good Samaritans are offering free gas to people in need at the Glendale AM/PM, during a massive power outage near Mesquite on Monday, Jan. 21, 2019. (Mat Luschek/Las Vegas Review-Journal)
U.S. Sen. Jacky Rosen falls at Las Vegas parade
U.S. Sen. Jacky Rosen of Nevada fell and injured her wrist at the Martin Luther King Day parade in Las Vegas on Monday, Jan. 21, 2019. (Nathan Asselin/Las Vegas Review-Journal)
Local astronomers host super blood wolf moon viewing
The Las Vegas Astronomical Society paired with the College of Southern Nevada to host a lunar eclipse viewing Sunday night. Known as the super blood wolf moon, the astronomical event won't occur for another 18 years. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
Tate Elementary shows academic progress after categorical funding
Students at Tate Elementary in Las Vegas has benefited from a program to boost education funding in targeted student populations, known as categorical funding. One program called Zoom helps students who have fallen below grade level in reading. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
The third annual Women’s March in Las Vegas
The third annual Women’s March in Las Vegas. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @btesfaye
First former felon to work for Nevada Department of Corrections
After his father died, Michael Russell struggled for years with drug addiction. When he finally decided to change for good, he got sober and worked for years to help others. Now he is the first former felon to be hired by the Nevada Department of Corrections. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
Three Square helps TSA workers
Three Square Food Bank donated over 400 care bags to TSA workers affected by the government shutdown Wednesday, filled with food, personal hygiene products and water.
Las Vegas furniture store donates to Clark County firehouses
Walker Furniture donated new mattresses to all 30 Clark County firehouses in the Las Vegas Valley, starting today with Station 22. (Mat Luschek/Las Vegas Review-Journal)
Mount Charleston Gets Heavy Snow, Fog
Mount Charleston saw heavy snow today, and fog in lower elevations as a cold front swept across the Las Vegas Valley. (Benjamin Hager/Las Vegas Review-Journal)
Krystal Whipple arrested in Arizona
Krystal Whipple, charged in the killing of a Las Vegas nail salon manager over a $35 manicure, is expected to return to Nevada to face a murder charge.
Holocaust survivor on acceptance
Holocaust survivor Celina Karp Biniaz, who was the youngest person on Schindler’s List, talks about the most important message for people to understand from her life and experiences.
Holocaust survivor speaks about telling her story
Holocaust survivor Celina Karp Biniaz, who was the youngest person on Schindler’s List, tells of opening up about her experiences during Sunday’s event at Temple Sinai.
Business
Auto repair shortage affects Las Vegas
The auto repair industry is facing a national shortage of workers.
Franchising industry booming
Experts say Las Vegas is a hotbed for the franchise industry.
Africa Love owner talks about his store in Las Vegas
Mara Diakhate, owner of Africa Love, gift and decor store, talks about his store in Las Vegas. (Bizuayehu Tesfaye/ Las Vegas Review-Journal) @bizutesfaye
Developer gets approval to build homes at Bonnie Springs
The Clark County Planning Commission has approved a plan to build 20 homes on the site of Bonnie Springs Ranch. (Michael Quine/Las Vegas Review-Journal)
Dig This opens new location In Las Vegas
Remember when you were a kid and played with construction toys in the sand box? Dig This Las Vegas has the same idea, except instead of toy bulldozers, you get to play with the real thing. (Mat Luschek/Review-Journal)
Town Square developer Jim Stuart building again in Las Vegas
Las Vegas’ real estate bubble took developers on a wild ride, something Jim Stuart knows all too well. (Las Vegas Review-Journal)
Salon opens at Veterans Village
T.H.E. Salon, owned by Nicole Christie, celebrated their opening at the Veterans Village with a ribbon cutting ceremony.
Southwest Airlines considering Las Vegas-Hawaii flights
Southwest Airlines CEO Gary Kelly says the airline is "very focused" on Hawaii. Hawaiians have a strong presence in Las Vegas.The city’s unofficial status is “Hawaii’s ninth island.” In 2018, at least 2,958 people from Hawaii moved to Nevada. Of those, 88.7 percent moved into Clark County, according to driver license surrender data. According to the Las Vegas Convention and Visitors Authority, 310,249 people came to Las Vegas from Hawaii in 2018.
Fewer Nevadans are celebrating Valentine's Day
Fewer Nevadans are celebrating Valentine's Day. About 1.2 million Nevadans are expected to celebrate this year, a 5 percent drop from 2018. A growing number of people consider Valentine’s Day over-commercialized. Others weren’t interested in the holiday or had nobody to celebrate with. But spending is expected to rise. Those who do celebrate are buying for more people. The average American is expected to spend about $162 this year for Valentine’s Day, a 57 percent jump from a decade prior. Katherine Cullen, director of industry and consumer insights at NRF
Foreclosures of mansions in Las Vegas
Las Vegas was ground zero for America's foreclosure crisis after the housing bubble burst. (Eli Segall/Las Vegas Review-Journal)
Rick Helfenbein talks about the impact of tariffs on the clothing industry
MAGIC fashion convention showcases men's clothing trends
The MAGIC fashion convention has come to Las Vegas at the Mandalay Bay Convention Center to showcase some of the hottest clothing trends for men. (Nathan Asselin/Las Vegas Review-Journal)
Allegiant Air flight attendants learn how to handle a water landing
Field instructor Ashleigh Markel talks about training prospective flight attendants for Allegiant Air getting live training with a raft for a water landing at the Heritage Park Aquatic Complex in Henderson on Monday. (John Hornberg/Las Vegas Review-Journal)
Smith & Wollensky CEO Michael Feighery speaks
Smith & Wollensky CEO Michael Feighery speaks about the new Smith & Wollensky restaurant coming to the Grand Canal Shoppes at The Venetian in Las Vegas.
Smith & Wollensky CEO Michael Feighery speaks
Smith & Wollensky CEO Michael Feighery speaks about the new Smith & Wollensky restaurant coming to the Grand Canal Shoppes at The Venetian in Las Vegas.
Smith & Wollensky CEO Michael Feighery talks about Las Vegas return
Michael Feighery, CEO of Smith & Wollensky Restaurant Group, discusses the restaurant's upcoming return to the Las Vegas Strip.
Apartments to Come to Hughes Center
Developer Eric Cohen discusses his current building project at the Hughes Center office park in Las Vegas, Thursday, Jan. 31, 2019. Caroline Brehman/Las Vegas Review-Journal
Stratosphere to rebrand to The STRAT
The Stratosphere, a 1,150-foot-tall property in Las Vegas will be renamed The STRAT Hotel, Casino and Skypod.
Local designers’ picks for the Las Vegas Market
The trends that local interior designers are noticing at the Las Vegas Market this year. (Rachel Aston/Las Vegas Review-Journal)
Trends in bath products at Las Vegas Market
Camille Herd, the showroom manager for European Bath Kitchen Tile & Stone, talks about the popularity of free-standing bath tubs. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
Kitchen trends at Las Vegas Winter Market
Las Vegas Winter Market displayed kitchen trends that mirror common dining accessories at Strip eateries. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
Emerging trends in gifts at Las Vegas Market
Julie Smith Vincenti, curator for the First Look showroom tour on gifts and lifestyle, talks about the emerging trends in those categories for this season. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
Las Vegas house prices are rising
Southern Nevada home prices were up 12 percent year-over-year in November.
Caesars Republic Scottsdale
Caesars Entertainment Corp. is building its first non-gaming hotel in the United States in Scottsdale, Arizona. (Caesars Entertainment Corp.)
Interior designer Mikel Welch talks about trends for Las Vegas Market
Interior designer Mikel Welch, who also is the on-camera designer for TLC’s Trading Spaces, discusses the trends he sees for the 2019 Las Vegas Winter Market. (Rachel Aston/Las Vegas Review-Journal) @rookie__rae
SHOT Show 2019: MEGGITT Virtual Training
MEGGIT showcases its virtual training system at SHOT Show 2019 in Las Vegas.
MGM delivers 700 meals to TSA workers at McCarran
Chefs at Garde Manger at Mandalay Bay provided 700 meals to federal employees who are affected by the government shutdown. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
SHOT Show 2019: A "nonsemi-automatic” weapon
Brandon Dunham of Nevada-based Franklin Armory show off the company’s new rifle prototype it calls a “nonsemi-automatic” weapon. The gun does not use a gas system to fire.
Las Vegas-based concrete repair company knows how to beat the heat
ART Concrete Solutions, a Las Vegas concrete-repair firm, addresses the challenges of construction in the extreme heat and sun of Las Vegas. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
Las Vegas based company brings color to concrete in the desert heat
Semco Modern Seamless Surface, a Las Vegas surface engineering company, knows how to put color in concrete construction in the Vegas heat. (K.M. Cannon/Las Vegas Review-Journal) @KMCannonPhoto
ad-high_impact_4
TOP NEWS
News Headlines
Home Front Page Footer Listing