transport

Schneider’s EVLink car charging stations were easily hackable, thanks to a hardcoded password

Posted by | automotive, broadband, charging stations, electric car, electric vehicles, energy, Gadgets, inductive charging, internet connectivity, New York, Security, transport | No Comments

Schneider has fixed three vulnerabilities in one of its popular electric car charging stations, which security researchers said could have easily allowed an attacker to remotely take over the unit.

At its worst, an attacker can force a plugged-in vehicle to stop charging, rendering it useless in a “denial-of-service state,” an attack favored by some threat actors as it’s an effective way of forcing something to stop working.

The bugs were fixed with a software update that rolled out on September 2, shortly after the bugs were first disclosed, and limited details of the bugs were revealed in a supporting document on December 20. A fuller picture of the vulnerabilities, found by New York-based security firm Positive Technologies, were released today — almost a month later.

Schneider’s EVLink charging stations come in all shapes and sizes — some for the garage wall and some at gas stations. It’s the charging stations at offices, hotels, shopping malls and parking garages that are vulnerable, said Positive.

At the center of Positive’s disclosure is Schneider’s EVLink Parking electric charging stations, one of several charging products that Schneider sells, and primarily marketed to apartment complexes, private parking area, offices and municipalities. These charging stations are, like others, designed for all-electric and plug-in hybrid electric vehicles — including Teslas, which have their own proprietary connector.

Because the EVLink Parking station can be connected to Schneider’s cloud with internet connectivity, either over a cell or a broadband connection, Positive said that the web-based user interface on the charging unit can be remotely accessed by anyone and easily send commands to the charging station — even while it’s in use.

“A hacker can stop the charging process, switch the device to the reservation mode, which would render it inaccessible to any customer until reservation mode is turned off, and even unlock the cable during the charging by manipulating the socket locking hatch, meaning attackers could walk away with the cable,” said Positive.

“For electric car drivers, this means not being able to use their vehicles since they cannot be charged,” it said. The company also said that it’s also possible to charge a car for free by exploiting these vulnerabilities.

Positive didn’t say what the since-removed password was. We asked for it — out of sheer curiosity more than anything — but the company isn’t releasing the password to prevent anyone exploiting the bug in unpatched systems.

The researchers, Vladimir Kononovich and Vyacheslav Moskvin, also found two other bugs that gives an attacker full access over a device — a code injection flaw and a SQL injection vulnerability. Both were fixed in the same software update.

When reached, a Schneider spokesperson did not immediately have comment. If that changes, we’ll update.

Additional reporting: Kirsten Korosec.

Updated at 12:15pm ET: with additional details, including about the unreleased password.

Powered by WPeMatico

GM is smartening up its Bolt EV smartphone app

Posted by | Android, Apple, automotive, cars, ChargePoint, charging stations, chevrolet bolt, electric vehicle, electric vehicles, energy, evgo, General-Motors, Greenlots, inductive charging, michigan, smartphone, transport, Transportation | No Comments

GM is sprucing up its smartphone app for owners of the all-electric Chevrolet Bolt through a collaboration with charging network companies EVgo, ChargePoint and Greenlots.

The idea is to take aggregate dynamic data from each of the EV charging networks so owners can have a “more seamless charging experience.” In short: GM wants to make it easier and more intuitive for Bolt EV owners to find and access charging. Removing hurdles from the charging experience can go a long way in convincing more people to buy the Bolt EV, or any EV for that matter.

The partnership with EVgo, ChargePoint and Greenlots is a notable start considering that collectively that means more than 31,000 charging ports.

“GM believes in an all-electric future, and this is a significant step to make charging easier for our customers,” said Doug Parks, General Motors vice president of Autonomous and Electric Vehicle Programs. “By collaborating with these three companies, we expect to reduce barriers to create a stronger EV infrastructure for the future. This is an important step toward achieving GM’s vision of a world with zero emissions.”

GM plans to take the aggregate charging data from EVgo, ChargePoint and Greenlots and use it to improve the myChevrolet app. For instance, owners will be able to see if a charging station is available and compatible with the Bolt EV. It also will provide real-time data on charge stations to report if a charging station is working.

GM plans to create an app interface that will streamline the enrollment process for each of these networks. The automaker wants owners to be able to activate a charging session using the app instead of a membership card, but didn’t say when that feature would be rolled out.

GM recently made a few updates to the myChevrolet app that lets owners project the energy assist to the vehicle’s infotainment system via Apple CarPlay and Android Auto for drivers with model year 2017 or newer Bolt EVs.

This means Bolt EV drivers can access information through their infotainment system, like vehicle range, charging station locations and search, as well as route planning that takes into consideration charging stops along the way if the destination is out of range.

Original purchasers of new Bolt EVs will have access to these features at no additional cost for five years from the vehicle delivery date, according to GM.

GM doesn’t provide updates about the Bolt EV, and more broadly its electric vehicle program, at the same pace and frequency as say Tesla. But the company is still ramping up and expanding. GM recently expanded a battery lab, and a new LG Electronics plant in Michigan has come online.

The LG Electronics facility in Hazel Park started making battery packs this fall to supply GM’s Orion Assembly Plant, where the automaker builds the all-electric Chevrolet  Bolt.

GM’s plan to launch 20 new all-electric vehicles globally by 2023 and increase production of the Chevy Bolt.

Powered by WPeMatico

BoxLock secures your booty against porch pirates

Posted by | Amazon, containers, Gadgets, Gates, key, lock, package delivery, padlock, TC, transport, UPS, wi-fi | No Comments

This clever – if expensive – product is called the BoxLock and it is a keyless padlock that lets your package delivery person scan and drop off your packages into a locked box. The system essentially watches for a shipping event and then waits for the right barcode before opening. Once the delivery person scans the package, the lock opens, the delivery person sticks the package in a box or shed (not included) and locks it back up. You then go and grab your package at your leisure.

The lock costs $129.

The company appeared on everyone’s favorite show, Shark Tank, where they demonstrated the system with a fake door and fake UPS dude.

The internal battery lasts 30 days on one charge and it connects to your phone and house via Wi-Fi. While the system does require a box – it’s called BoxLock, after all, not LockBox – it’s a clever solution to those pesky porch pirates who endlessly steal my YorkieLoversBox deliveries.

Powered by WPeMatico

SpaceX lands Falcon 9 booster on Just Read The Instructions drone ship

Posted by | booster, falcon, Falcon 9, Gadgets, science, Space, spacecraft, spaceflight, SpaceX, transport | No Comments

SpaceX confirmed on Twitter this morning that it recovered the booster from the latest Falcon 9 launch. Shortly after launching from Vandenberg Air Force Base in Southern California at 7:39AM ET this morning, the booster stage landed on the Just Read The Instructions drone ship. The company will now try to catch the rocket’s fairing with a giant net attached to the ship Mr. Stevens.

Despite challenging weather conditions, Falcon 9 first stage booster landed on Just Read the Instructions.

— SpaceX (@SpaceX) July 25, 2018

SpaceX has become more adept at landing its booster rockets but it’s still a spectacle every time it happens. This landing is extra special as the winds were gusting around the time of the launch.

The rocket company has so far been less successful with catching the payload shrouds. SpaceX’s high-speed recovery boat Mr. Steven took to the seas this time around with a larger net in the hopes of recovering the fairings. Reusing as much as possible is critical to SpaceX’s mission to lower the cost of space flight.

Today’s launch was SpaceX’s seventh mission for the company’s client Iridium who contracted with SpaceX to launch 75 satellites into orbit. According to SpaceX, today’s payload of Iridium satellites so far deployed without an issue. SpaceX is contracted for one more launch with Iridium.

This was SpaceX’s 14th launch of 2018.

Powered by WPeMatico

Tesla adds autonomous parking mode to Model 3

Posted by | automotive industry, autonomous car, driver, Gadgets, model, Model 3, Tesla, Tesla Model S, Tesla Model x, transport | No Comments

The Model 3 can now park itself. Called Summon, the feature is now available on the company’s new sedan.

It’s a clever feature that takes advantage of the vehicle’s connectivity and autonomous driving capabilities. With Summon owners can command their Model 3 to pull into a parking spot and power down. It can even control garage doors — all without a driver behind the wheel or controlling the vehicle remotely. Tesla added the feature to Model S and Model X vehicles last year.

Note, no one is in the car or controlling remotely. Car is driving entirely by itself. https://t.co/xSG2Mmy756

— Elon Musk (@elonmusk) July 5, 2018

This is the latest feature Tesla added to the Model 3 after its launch. The company is in a frenzy to keep up with production goals and the nature of the Model 3’s connected platform allows the company to added features to already-built vehicles.

Powered by WPeMatico

Video: The driver of the autonomous Uber was distracted before fatal crash

Posted by | arizona, Automation, autonomous car, car sharing, commuting, Gadgets, pittsburgh, San Francisco, self-driving car, spokesperson, toronto, Toyota, transport, Uber, United States, volvo | No Comments

The Tempe, Arizona police department have released a video showing the moments before the fatal crash that involved Uber’s self-driving car. The video includes the view of the street from the Uber and a view of minder behind the wheel of the autonomous Uber.

Warning: This video is disturbing.

Tempe Police Vehicular Crimes Unit is actively investigating
the details of this incident that occurred on March 18th. We will provide updated information regarding the investigation once it is available. pic.twitter.com/2dVP72TziQ

— Tempe Police (@TempePolice) March 21, 2018

The video shows the victim crossing a dark street when an Uber self-driving Volvo XC90 strikes her at 40 mph. It also shows the person who is supposed to be babysitting the autonomous vehicle looking down moments before the crash. It’s unclear what is distracting the minder. It’s also unclear why Uber’s systems did not detect and react to the victim who was clearly moving across its range of sensors at walking speeds.

Uber provided the following statement regarding the incident to TechCrunch:

Our hearts go out to the victim’s family. We are fully cooperating with local authorities in their investigation of this incident.

Since the crash on March 19, Uber has pulled all its vehicles from the roads operating in Pittsburgh, Tempe, San Francisco and Toronto. This is the first time an autonomous vehicle operating in self-driving mode has resulted in a human death. In a statement to TechCrunch, the NHTSA said it has sent over its “Special Crash Investigation” team to Tempe. This is “consistent with NHTSA’s vigilant oversight and authority over the safety of all motor vehicles and equipment, including automated technologies,” a spokesperson for the agency told TechCrunch.

“NHTSA is also in contact with Uber, Volvo, Federal, State and local authorities regarding the incident,” the spokesperson said. “The agency will review the information and proceed as warranted.”

Toyota also paused its self-driving testing in the US following the accident.

This tragic accident is the sort of situation self-driving vehicles are supposed to address. After all, these systems are supposed to be able to see through the dark and cannot get distracted by Twitter.

Powered by WPeMatico

Porsche’s electrification to lead to most powerful 911 to date, says CEO

Posted by | automotive industry, Gadgets, Porsche, porsche 911, sports cars, transport | No Comments

 The storied 911 will not be immune from Porsche’s electrification plans and that could be a good thing. The car company’s CEO recently told Autocar that the hybrid 911 “will be the most powerful 911 we’ve ever had; 700 bhp might be possible.” Count me in (as long as someone buys it for me). Porsche already makes 911 models above the 700 mark so it’s likely… Read More

Powered by WPeMatico

BMW acquires Parkmobile parking app to help tackle city traffic

Posted by | automotive, automotive industry, BMW, bmw group, Fundings & Exits, Mobile, north america, parking, TC, transport, Transportation | No Comments

 BMW has acquired Parkmobile, an app that provides guidance and services for those looking for parking in North America, including on-street and garage parking payments and spot reservation. BMW Group had already held a minority investment in the company, and owned its Parkmobile Group Europe affiliate, but today it increased its holdings to reach majority ownership of Parkmobile, LLC, which… Read More

Powered by WPeMatico

Toyota and Lexus vehicles will finally start getting CarPlay this year

Posted by | automotive, automotive industry, CarPlay, here, lexus, Mobile, sedans, Software, TC, Toyota, transport, Transportation | No Comments

 Toyota has been a holdout from CarPlay, Apple’s in-dash infotainment system that works with your iPhone. The automaker and its luxury brand Lexus have yet to offer it in any models, despite most other car companies giving in on at least a few vehicles (which tends to later to broader rollout thereafter). The new 2019 Toyota Avalon will have CarPlay on board, however. The vehicle was… Read More

Powered by WPeMatico

Mercedes-Benz’s new MBUX in-car assistant and smart UI rocks

Posted by | automotive, automotive industry, Daimler, Gadgets, here, Mercedes-Benz, nvidia, smart, TC, transport, Transportation | No Comments

 It’s rare that I pay much attention to automaker infotainment and multimedia system updates at CES – usually there’s too much going on with autonomy, electrification and mobility services to give it much thought. This year, however, Mercedes-Benz had one of the most interesting announcements at the show with its new MBUX smart multimedia system and in-car voice activated… Read More

Powered by WPeMatico