Saturday, December 20, 2014

Here's how easy it is to hack a traffic light with a laptop

(Horia Varlan)

In a new study, a group of computer scientists from the University of Michigan recently revealed a major vulnerability in an unlikely hacking target: traffic lights.

Using nothing more than a laptop and a wireless card that operated at the same frequency (5.8 gigahertz) as the wirelessly networked traffic lights, the group was able to take control of a number of lights in an unnamed area of Michigan (they had the permission of local authorities). This meant that they could alter the normal timing pattern of the lights, turning all the lights along a given route green, for instance, or freezing an intersection with all reds.

An estimated 62 percent of traffic lights nationwide are networked — many via wireless radios —so they can communicate with other intersections or a central server to optimize the flow of traffic. But, at least in some places, designers have taken no steps to protect these systems from outside threats.

The system tested by the researchers broadcast an unencrypted wireless network that was visible on normal laptops and smartphones, although they can't normally connect to it. But it only took a tiny bit of extra work for the researchers to do so, in part because whoever installed the system left default user names and passwords in place.

Once they had access, they could use a series of simple commands to freeze the traffic lights in their current state, or turn all lights red, or alter the timing of the light changes. The one thing they couldn't do was give all sides of an intersection a green light — that'd take physical access to the roadside traffic cabinet housing failsafe equipment, which automatically switches the whole intersection to a flashing red if a dangerous configuration occurs.

Still, the ease with which they took control of the lights is disturbing. That kind of control could easily allow someone to disastrously disrupt the flow of traffic in a busy area, and while it's uncertain whether all systems are so poorly protected, similar vulnerabilities have been found by others in cities across the US.

(Thanks to MIT Technology Review for the link.)


Correction: This previously stated that 62 percent of traffic lights are wirelessly connected. 62 percent are connected, but some fraction of those are connected through cables.

Get Vox in your inbox!

By signing up, you agree to our terms.

X
Log In Sign Up

forgot?
forgot?
Log In Sign Up

Forgot password?

We'll email you a reset link.

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Forgot username?

We'll email it to you.

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Forgot password?

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Try another email?

Forgot username?

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Try another email?

Almost done,

By becoming a registered user, you are also agreeing to our Terms and confirming that you have read our Privacy Policy.
Spinner.vc97ec6e

Authenticating

Great!

Choose an available username to complete sign up.

In order to provide our users with a better overall experience, we ask for more information from Facebook when using it to login so that we can learn more about our audience and provide you with the best possible experience. We do not store specific user data and the sharing of it is not required to login with Facebook.

tracking_pixel_10934_tracker