This Is How Easy It Is to Hack EV Chargers

This Is How Easy It Is to Hack EV Chargers | WSJ

Рет қаралды 386,703

Күн бұрын

Electric vehicle chargers are plagued with security flaws that could expose sensitive data, compromise Wi-Fi networks and in a worst-case scenario, bring down power grids. Today’s EVs have more lines of code than a modern passenger jet, making them increasingly vulnerable to cyberattacks.
WSJ reveals how EV chargers can be hacked, and what it will take to protect the world’s rapidly growing EV infrastructure from cybercriminals.
Chapters:
0:00 EV chargers vulnerabilities
0:44 How to hack into an EV charger
4:06 Power grid implications
6:49 Cybersecurity
News Explainers
Some days the high-speed news cycle can bring more questions than answers. WSJ’s news explainers break down the day's biggest stories into bite-size pieces to help you make sense of the news.
#EV #Cybersecurity #WSJ

Пікірлер: 566

@bobmcl2406 4 ай бұрын

"Unconnected and dumb" is the best advice I have heard lately!

@Neojhun 3 ай бұрын

No Network Connection is how vast majority of Level 2 AC charger operate. They simply don't need a network connection.

@tombuckley91 2 ай бұрын

It’s really not - why stop there? Throw your laptop away, don’t use a mobile phone, shun the internet. Their cure has become worse than the disease.

@Fenthule 4 ай бұрын

Connecting the internet to everything is a terrible idea. People are bugging their own houses willingly due to ignorance.

@richardjohnson8009 4 ай бұрын

a tinder box with a smart ignition, all snug in your house, seems like a great idea

@jamesconroyfinn 4 ай бұрын

Same thing with footpaths! Why do we make it so easy for strangers to come to our homes? If you get rid of the path, you don’t even need locks on your doors!

@PVZHARCORECITY 4 ай бұрын

People buy super expensive smart locks, with a special anti picking cylinder, but then as it has a solenoid you can open it with a strong magnet 😂

@phamilyspace 4 ай бұрын

Hey, everyone! I've been delving into KZfaq, focusing on storytelling and creative video-making. Recently stumbled upon VideoGPT, and it's been a total game-changer. My videos now have this professional quality that has really boosted my confidence.

@jayjya 4 ай бұрын

Hasn’t anyone seen maximum overdrive!?!

@NoahHeadglitch 3 ай бұрын

I like how they tried questioning raspberry pi when they clearly stated it's not for commercial use

@fredfred2363 3 ай бұрын

Raspberry Pi was originally set up as a school educational thing to help kids get into hardware and coding. I can't believe that some professional electronics designers haven't moved on from school level electronics class.

@KodakYarr 3 ай бұрын

It's just laziness

@GideonMesser 3 ай бұрын

Some of the Raspberry Pi units are intended for use as a component in a production device.

@randomblock1_ 3 ай бұрын

They are. They just recommend using the CM4 instead of CM3. Tons of commercial products use Pis. There's an entire "for industry" page on the Pi website

@davidmalkowski7850 3 ай бұрын

Stating a Pi is not for commercial use is quite dense. A Pi Compute Module is designed for development, but commercial breadboards and development boards use Pi as a headless computer to IO interface all the time instead of adding serial ports to bigger computers or replacing them all together.

@brendanpells912 3 ай бұрын

Wht they're calling 'chargers' is a misnomer. The charger is built into the car. The box on the side of your house is a power outlet. It makes power available to the on-board charger but the current drawn is determined by the on-board charger.

@JOfAllT 4 ай бұрын

This is a general concern for IOT devices but this pen test company is dramatizing and creating unnecessary FUD. One can't connect to any EV charger (EVSE or DCFC) because one charger is compromised, unless the providers overall ecosystem itself is vulnerable.

@papajohnsuk5965 4 ай бұрын

yeah those were my exact thoughts

@jacobp8294 4 ай бұрын

The problem with that statement is the assumption the network is not vulnerable. Often we rely on the overall networks security to protect against low level fruit like this, but in truth and as seen in recent cyber attacks, many industries previously thought impenetrable have been hacked. In addition, highly targeted attacks against individuals do take place globally, any vulnerability, even one which affects a single individual, is a danger to all.

@JOfAllT 4 ай бұрын

@@jacobp8294 Network vulnerability is a general concern (with any connected device/service) which I already mentioned.

@emmettturner9452 4 ай бұрын

I like how using a rPi is a “bug” just because it’s an open platform. What do they think about OpenEVSE?!

@viljamip 4 ай бұрын

Well, if the manufacturer of the charger failed to add proper authentication to their APIs and the devices can be addressed through their sequential serial number, then any one can register an account and use those credentials to control all the chargers whose serial number they can guess. Of course the API should check that the charger the user tries to control belongs to the user but apparently that used not to be the case. Instead, they relied on the UI which only shows the user their own chargers but thats fairly trivial to bypass by using the same APIs the app uses.

@SolaceEasy 4 ай бұрын

Showing the companies do not take cybersecurity seriously and then repeating their statement that they take cybersecurity seriously?

@LabGecko 3 ай бұрын

They are legally required to give the company's response. Not doing so gets the journalism company sued.

@seattlekarim964 4 ай бұрын

Stealing a Wi-Fi password does not give you a bank password. Bank passwords are also E2E encrypted. No need to exaggerate.

@bbgator1 4 ай бұрын

In the USA, 99% of these chargers are in peoples garages locked away. The big security risk for most people is in their filing cabinet. Where is the median doing a piece on the filing cabinets?

@Kx0195 4 ай бұрын

If you steal a WiFi password you can emulate the WiFi network and implement a man in the middle attack. Are you a security consultant or penetration tester?

@nk2fh 4 ай бұрын

@@Kx0195that doesnt really matter, pretty much all connections like that are over TLS.

@nk2fh 4 ай бұрын

And you dont need to steal a wifi pass to impersonate a wifi network and do mitm.

@ben_car_8115 4 ай бұрын

@@Kx0195I am and the mod is correct

@cameron2714 4 ай бұрын

I wrote a paper on this last semester. The scary thing is that the weakest point on the grid changes depending on the time of the day / usage. If an attacker times everything right, then they can take down a small piece of the grid that could cascade to the larger system with a minimal amount of EV chargers (or smart thermostats). There are safe-guards against cascading failures, but they aren't designed for this type of attack.

@edc1569 4 ай бұрын

In the uk the regulation requires that charge start and stop times have a randomised offset which is controlled in firmware not accessible to update or change.

@randomblock1_ 3 ай бұрын

You'd need far too many EVs for that to be an issue, and they'd have to be plugged in. The majority of chargers are in garages. Maybe thermostats, but most houses use gas heating. If you could gain remote access to every EV charger, you could pull it off, but that's like saying if you could get inside a vault you could perform a heist. It's not practical.

@LabGecko 3 ай бұрын

@@randomblock1_ said _"It's not practical."_ Does it need to be? Was the attack on the Iranian nuclear plant practical? I doubt when Putin says "Hack that network" that his hackers respond _"But that isn't really practical sir."_

@geoffh1 2 ай бұрын

@@LabGeckoThe point is that it would take decades to do all that hacking. And by then the first chargers would have been replaced.

@buscseik Ай бұрын

If you wrote a paper on this, than you can answer to me this simple question. if we have a small country for example avg 5gw daily peak, how many charger will have to be turned on to bring down the network?

@cinemabunny 4 ай бұрын

I wrote up a compliance landscape for one of the top global auto manufacturers. There are real examples of hackers holding the company for ransom threatening DDOS. Threats included disabling security features (locks, adaptive cruise control, air bags, abs...), hacking personal information of connected devices, and disrupting recharging infrastructure. I warned them that there needs to be a clear divide between vehicle operating systems and infotainment.

@Ajv516 4 ай бұрын

I left the cybersecurity industry because I was tired of warning the C-suite and seeing deliberately negligent responses. If they want to answer to Congress, that’s their business. Not mine.

@RokeJulianLockhart.s13ouq 4 ай бұрын

DDoS is totally irrelevant to this. That can be mitigated by a middleman like Cloudflare, and certainly doesn't matter in the context of hardware vulnerabilities.

@SonnyDarvishzadeh 4 ай бұрын

Talking to anyone in pentest world will scare you. And it should actually.

@drumset09 4 ай бұрын

Raspberry Pi?? This is babytown frollics as far as hackers are concerned.

@Greg99rock 3 ай бұрын

almost like its a weapon from china

@minxythemerciless 2 ай бұрын

Raspberry Pi OS is as good as any mainstream linux server in terms of security. The "problem" is the ability to easily remove and modify the compute module. That is not a serious attack vector as it requires prior physical access to each and every target device. This is not going to happen.

@user-uf3mm5xp6d 4 ай бұрын

I'm an electrical engineer. This guy obviously picked the cheapest, most armature charging box on the market. Have him try it on a Tesla charger.

@Tylerbb8122 4 ай бұрын

Yup was coming to say the same lol

@CornelleJ 4 ай бұрын

You missing the point.. They are connect to the power grid and they could take everyone down. Doesn't matter who the maker is. One weak company puts everyone at risk. Just like one lazy coworker opening an email put the company at risk..

@buscseik 4 ай бұрын

@@CornelleJ That is not true at all. This video has no evidence. They did not show how it can be hacked. They only removed an rpi compute module from a box. but did they show the data is not encrypted on the box? Did they link any company announcement? Did they show any link to the vulnerability database? Also the video did not say how they can be used to bring down the network. The study is not linked.

@CornelleJ 4 ай бұрын

@@buscseik Rewatch the video, they said the first 1 had 2 Vulnerabilities. Wallbox, hardware bug. 2nd was a remote attack. (smart phone attack), then Project EV had issue because of SN# for Creds.

@buscseik 4 ай бұрын

@@CornelleJ Vulnerabilities has a public database. if this video would be true, these would be listed there, so the video could link them. Just for example, they made a screenshot of a study in the video published by IEEE. I checked if I can find the study on the IEEE website, but it is not there. Only two match, non of them were valid (one is a public file storing system, other is a website which signed by letsencrypt, which means, the site owner did not have to present id card or bank card to anyone to get the certificate, even a hacker could do that)

@kirknelson156 4 ай бұрын

I like how they push the responsibility on the users instead working out the bugs before releasing a product. like my folks in their 70's and 80's are going to have a clue, my dad doesn't even have a smart phone.

@matthewholzner9526 4 ай бұрын

I like this reporting, but I feel it's a bit sensationalist. Cybersecurity research companies are paid to painstakingly find any and all loose threads with security and envision a worst-case scenario. I feel that's the only side of this represented in this story. While I'm sure they can be better, there are already safeguards in place against many of these issues (multi-factor authentication, car-key security, the ability to make your charger 'dumb' if it's in a public access area, etc). I guess it's technically possible, but the reality of a power-grid surge where a bunch of hackers physically individually popping the cover on a massive number of EV's, steal the log-in data, then later log into all of those accounts simultaneously and telling the cars to charge is pretty remote, right? Also, aren't most cars already charging when plugged in?

@samuelhong4272 4 ай бұрын

And there are methods to bypass 2fa and car security. Also other countries have had attacks on their power grid. It’s not unheard of. Doesn’t have to be a hacker but a state actor as well. But it’s definitely sensationalist.

@skyak4493 4 ай бұрын

I am not a security expert, just a home user/engineer and these flaws they are pointing out are class A negligence! None of these products should have made it to a customer

@buscseik 4 ай бұрын

Also, everyone forget there are fuses everywhere in the electricity network :)

@LabGecko 3 ай бұрын

I think the point is that there are no standards keeping companies to a bare minimum of security. How many consumers do you know that search for security vulnerabilities before buying a product? I'm regularly telling friends and family about security holes and can't get them to check ahead of time. How diligent is the general public? And given that's their target audience, how diligent do you think companies are about security and safety when they need to get those numbers up for the next quarterly report?

@skyak4493 3 ай бұрын

@@LabGecko Just look at how many products claim to be "smart" Look at how easy it is to be a high paid idiot in marketing vs how hard it is to be an engineer producing products they are then responsible for. Instead of just paying the least amount for the highest review rating, we need to start looking at every product and ask, "is this working FOR me or AGAINST me??? Is turning my appliance on from anywhere in the world really worth exposing myself to hackers from anywhere in the world????

@KevinInPhoenix 4 ай бұрын

Fear, uncertainty, and doubt.

@hilkokoetje404 3 ай бұрын

We’ve just been fudded: “we’ve created weapons” 😬

@LabGecko 3 ай бұрын

Yeah, the verbiage was a bit over the top. But the scenario is real enough. There are plenty of nation states paying big money for attacks on grids. Browse Darknet Diaries if you need examples.

@apolodelsol 4 ай бұрын

The commercial psychosis of selling "smart" technology has only generated endless risks and security hazards.

@IraQNid 4 ай бұрын

You can recharge an electric car without any of these security risks. When I had one, all I had to do was plug it into the power socket. A meter on the dashboard showed my charge status. The car never overcharged. I could set it and forget it until the charge was finished. If you want to have remote access to what your car's computer data, it is better to use a cellular connection on your phone to the car. Wi-Fi was never meant to be safe. Just a different way to connect things together. There is nothing safe about using Wi-Fi.

@QualityDoggo 4 ай бұрын

Wi-Fi is designed to be somewhat safe... but it doesn't make bad designs good

@mrtechie6810 4 ай бұрын

You think cellular is safer?

@lambertois11 4 ай бұрын

This typical of new systems. The priority is to implement the new system fast, with little regard to the intrinsic security! Remember the early days of the Internet !

@userbosco 4 ай бұрын

It's mind blowing that these industries continue to release infrastructure systems that aren't meeting the same standards that the IT industry does. It's getting better, but way to slowly and oversight is still sketchy.

@szaszm_ 4 ай бұрын

No, just having your wifi password doesn't let attackers intercept your passwords. Everything is encrypted nowadays.

@LabGecko 3 ай бұрын

Someone has lied to you 😆

@szaszm_ 3 ай бұрын

@@LabGecko what do you mean?

@user-iw8eg4yn8t 4 ай бұрын

imagine someone hacking self driving cars💀

@lawrencefrost9063 4 ай бұрын

Imagine someone hacking a plane you fly in? Why don't you express worry about that? Because you know the companies flying have every incentive to make that as difficult as possible. Cars are no different.

@lesliecarter4295 4 ай бұрын

@@lawrencefrost9063 they aim laser pointers at planes and try to dazzle the pilot. In China people are aiming the lasers at the cameras controlling the car. It blinds autonomous vehicles. This is why LiDAR is extensively used.

@OneManOnFire 4 ай бұрын

As someone who works with self driving cars. The amount of stuff you would need to do in order to hack it and gain control would be pointless. You could only move 3mph for a few feet.

@lesliecarter4295 4 ай бұрын

@@OneManOnFire absolutely, if someone is intent on causing problems then either stopping it physically or make it veer off course would be the option.

@user-iw8eg4yn8t 4 ай бұрын

@@OneManOnFire buddy my point was that even if its to hard but few feets could cause series of serious accidents on certain scenarios

@seasong7655 4 ай бұрын

Sounds like they let the interns design these chargers or did they maybe outsource the design 🤣🤣

@dwadd7528 4 ай бұрын

hyundai KIA can be stolen by 10 years old kids with USB cable.

@Netryon 3 ай бұрын

It would be one car I'm not trying to find

@wendull811 3 ай бұрын

They also need a screwdriver to pop the panel open to access the ignition switch.

@seanedghill5025 2 ай бұрын

By design lol

@denisruskin348 4 ай бұрын

Just lock the device behind a metal cage xD

@SgtJoeSmith 4 ай бұрын

someone never heard of lock picking lawyer

@ItzAwsomeWasTaken 4 ай бұрын

@@SgtJoeSmithsomeone’s never heard of cameras. If you have a Tesla you **most** likely have cameras

@SgtJoeSmith 4 ай бұрын

@@ItzAwsomeWasTaken but what if you are wearing black pants and black hoodie and black skin? you look like all the rest of them

@Netryon 3 ай бұрын

But the warlock is your best sega nintendo player

@Jimmeh_B 4 ай бұрын

The only way to make any of this better, is for people to stop connecting literally everything in their lives to centralised servers. Most of which have fundamental security flaws, and all of which will always have flaws of some kind.

@Sparky400 3 ай бұрын

I don't understand why IOT device manufacturers insist on cloud first connection and not local connections for things.

@ZennMagic 3 ай бұрын

@@Sparky400 So they can revoke your access whenever they feel like

@LabGecko 3 ай бұрын

Connecting and selling data is a base business model for most companies today

@vincentkuipers9577 4 ай бұрын

Is nobody asking why a vehicle charger even needs to contain sensitive data? Lock it with a physical key like your front door and the only thing it needs to know is the state of your battery and charge until the desired level.

@SegFaultOnLine1984 4 ай бұрын

because it doesn't contain sensitive data. it's just your wifi password

@Djamonja 4 ай бұрын

@@SegFaultOnLine1984 Isn't your wifi password fairly sensitive data?

@kenmore01 4 ай бұрын

Because many people are stupid. Older tech is usually better and for some reason, people feel a need to "upgrade" everything. Our locks at my apartments were "upgraded" from lock and key to digital cards. It gives the landlord more info, but the batteries need to be replaced yearly (six AA batteries per lock) and I wonder about security. The old locks and keys worked 100% of the time.

@SegFaultOnLine1984 4 ай бұрын

@@Djamonja not really, anything that connects to your home network and is outside your house is fairly susceptible to these sort of attacks. Gaining access to your wifi password is pretty pointless for pretty much any malicious actor anyway considering they actually need to be outside your house. And the bank details part is pure fear mongering because of https.

@Djamonja 4 ай бұрын

@@SegFaultOnLine1984 Once they have your Wifi password, can't they sit in a car near your house and access your network?

@buscseik 4 ай бұрын

The study which was presented(but not linked) states, the chargers are not monitored by utility companies. That is not true. At least in Europe all installed ev charger supports open ADR, which provides control for utility providers.

@ExplorerInternetDotCom 4 ай бұрын

With hacking cars, that reminds me of Watch Dogs 2 where you could do the exact same thing

@paaaatrika 4 ай бұрын

en.wikipedia.org/wiki/Michael_Hastings_(journalist)#Controversy_over_alleged_foul_play

@robertjamesonmusic 4 ай бұрын

No one is hacking cars. This is just WSJ bs

@ExplorerInternetDotCom 4 ай бұрын

@@robertjamesonmusic I mean, if a vehicle has to rely on smart technology, that kind of tech could possibly be tapped into

@Netryon 3 ай бұрын

Somebody on bbc news not having the word watchdogs

@KuruGDI 3 ай бұрын

@PenTestPartners: Could you perhaps also try a little bit of that whitehat hacking magic on the Boeing 373 Max?

@MrGuru666999 4 ай бұрын

Yeah, get the updates, but if the company makes hundreds of models of devices it will forget the "old" ones very soon. And if the source code of the devices is closed because they want the moneys then no one can update it, even if the company closes

@LostHalfway 4 ай бұрын

The fact that it’s not standard to put all of these IOT devices on their own network at this point is quite sad. All routers should really come with an “IOT” network, a “guest” network, and a “trusted” network.

@subbiahpalani 4 ай бұрын

This is why good network security is a good idea, Also props to Porsche offering PLC comms on their Connect products. VAG and other people please don’t go all wireless.

@bigwill1890 4 ай бұрын

Also could get a VPN for Mobile device(s) that’s connected to EV charging accounts and protect that way. And also add multiple layers of verification to those accounts as well.

@enigmaticloremaster1700 4 ай бұрын

Makes me wonder if wifi inverters for home use on a solar system can also be hacked. Most run through the household modem.

@alap1983 4 ай бұрын

EVERY Security Expert and Veteran Internet user will advise the same thing: Keep Stuff as Dumb as possible. If there's NO need to connect to the internet... DON'T. Right now, people are happily connecting their TVs, Toasters, Ovens, Doorbells, Security Cameras, Window Blinds, and even Faucets (among other things) to the Internet. These IoT (Internet of Things) are a Security Nightmare if not configured correctly AND Isolated properly from the Home Network. People today are essentially offering MULTIPLE pathways to digital intruders. As far as EVs are concerned... Manufacturers MUST keep systems Isolated. The Charging Tech must be separated from Infotainment.

@machinmon. 4 ай бұрын

Facebook is already here bro

@RokeJulianLockhart.s13ouq 4 ай бұрын

Yet, this simply won't occur. People shall use IoT devices. That's not a solution.

@edc1569 4 ай бұрын

In the UK there is dynamic pricing for ev charging, needs a network connection

@LabGecko 3 ай бұрын

Until it's illegal to sell customer data this will remain a base corporate business model.

@AdvantestInc 4 ай бұрын

Addressing these cybersecurity challenges is key to ensuring the reliability and safety of our growing EV infrastructure. It's a call to action for all stakeholders in the technology ecosystem.

@kothurukoushik2530 4 ай бұрын

super this type of content is needed

@antoinepageau8336 4 ай бұрын

Never trust someone who opens with "suppose we're the good guys"

@Sparky400 3 ай бұрын

Is there a citation on how an EVs battery could be over heated using the wall connector? I don't see how it would be possible so would like to know how you came to that conclusion.

@fredfred2363 3 ай бұрын

You're right- it's factually incorrect. The actual charger and battery management system is part of the car. The wall box "charger" is nothing more than a power switch that communicates with the in-car charging circuit, telling it what the limit of power it can suck out of the wall.

@andlykwan 4 ай бұрын

basically you took someone's drive out? you can literally steal someone's laptop, punch a hole in it, take the ssd out and read all the information.

@stephanb5945 3 ай бұрын

the just use a : Raspberry Pi Compute Module 3 (CM3) : and the put a sticker on the Raspberry logo 🤣🤣🤣

@chenyuwu8329 3 ай бұрын

The initial animation of power grid shutdown seems very familiar to me…. I m almost sure that shows São Paulo s most popular district 😂😂😂

@SgtJoeSmith 4 ай бұрын

Hack the Planet! lol. Hackers movie reference

@drem2442 4 ай бұрын

This is beyond laughable 😂😅😂😅😂😅😂 "thanks for the update" a criminal somewhere is saying

@huckleberryfinn6578 4 ай бұрын

Criminals are reading specialized forums, not a mainstream media channel reporting outdated stuff.

@topotree 4 ай бұрын

tell those guys that it's not individual persons responsibility to update the system, it should by default have auto update feature!

@ForcefighterX2 4 ай бұрын

If my wallbox is "the power grid", then my router is "the internet".

@mattsimon931 4 ай бұрын

guess I have to change my PW now...thanks WSJ

@chesthairascot3743 4 ай бұрын

@WSJ 2:09 - The highlighted section where it says 'not recommended for new designs' (NRND) -- That's talking about sourcing/availability. It basically means they're getting ready to take that particular part out of production. It doesn't refer to the suitability for a particular application. I still agree with the overall argument that RPI's are unsuitable for this application though.

@Erosis 4 ай бұрын

If someone steals an IoT device from your home, you should change your Wi-Fi credentials. It doesn't matter what platform it uses.

@davidmccarthy6061 4 ай бұрын

Yep, my EVSE is electric delivery only, dumb wires.

@bradhaughton6698 4 ай бұрын

When it comes to update haft of people don't even update their stuff at all.

@bnosza 4 ай бұрын

I’m running the one bought from Aliexpress China for 150usd with no wifi and set charging time to be on only during of peak from my car for a year with no issue😊 Cheap with no fancy option to be compromised😊 Charger can fire from 2.2kw up to 7kw though the RFID key to tap to start to stop the charger can be compromise but still there can not charg if my car say otherwise.

@fredfred2363 3 ай бұрын

And just by using a "flipper" you can hack the RFID. D'oh!

@cjnewbs 4 ай бұрын

“The Raspberry Pi is not really for a commercial product like this” 🤦‍♂️The compute modules are *LITERALLY* designed for this exact purpose! That’s why they exist.

@Neojhun 3 ай бұрын

MOST Level 2 Chargers are OFFLINE anyways. They simply do not need a network connection.

@FragEightyfive 4 ай бұрын

The fact toothbrushes were used for a DDOS attack should have been one of many more recent wakup calls.

@steviewonder56 4 ай бұрын

It’s these instances that require actual intervention from government powers to hold corporations accountable… you simply cannot trust them to operate on a level that is without thorough scrutiny and testing with their endless pursuit of limitless growth.

@huplim 4 ай бұрын

This is what can happen when you connect everything to the internet

@Neojhun 3 ай бұрын

Yet vast majority of Level 2 AC chargers are NOT connected to the internet.

@user-ni4pk8xh6n 4 ай бұрын

Imagine a bad hacker and now they know to hack you ev

@davidmeermans1579 4 ай бұрын

I am impressed by the level of security incompetence by the presented equipment developers in light of what we have learned over the past 30 years. This failure is how we get more government regulation and put the lie to comments from industry that "security is a primary concern". Best advice, do not unnecessarily connect to the Internet.

@Joe-nx7nj 4 ай бұрын

This is ridiculous and a national security risk. Good job

@JohnKerrashVirgo 4 ай бұрын

If Wallbox took flaws so seriously, why did they rush to market with a cheap solution...

@ianemery2925 3 ай бұрын

This is why I went for a commando socket and "portable" charger; the change from stand-alone wall chargers to Internet of Everything was never going to go well; people learned nothing from the issues with early electricity Smart meters. When I brought up the issues of being remotely shutdown when using an internet connected charger - people called me an idiot; people STILL call me an idiot - because news of these hacks isnt widespread and is never mentioned on the big TV news channels. For example, even though I follow a lot of tech news, I had no idea Ukrainian EV chargers were hacked and shut down at the start of the Russian genocide.

@davidrandall2742 4 ай бұрын

I'd like to see if other brands of chargers are this vulnerable, as Wallbox is a low-end charger.

@LabGecko 3 ай бұрын

Vulnerabilities have continued to show up, and be swatted, by all companies involved. It's getting better, but there should have been minimum standards in place instead of this _"we'll fix it when someone finds a way in"_ mentality.

@The_Slavstralian 3 ай бұрын

"we take security very seriously " Whispers * as long as it doesnt affect out profit margins *

@ghost307 3 ай бұрын

The best way to stop the bad guys is to think like a bad guy.

@4115steve 4 ай бұрын

I bought a wired printer for a lot of reasons mentioned in this video

@WallyHays 4 ай бұрын

In California we have the option to buy vanity license plates with a digital display but it recently came to light that plates could be hacked and your identity, address, and the location of your vehicle could be tracked.

@Sashabeana13 4 ай бұрын

Awesome

@sjoervanderploeg4340 3 ай бұрын

The security of the Raspberry had nothing to do with it, this should have never been deployed like this!

@sjoervanderploeg4340 3 ай бұрын

And it is quite funny that all these companies say they value security, but yet they fail horribly and fall flat on their face using the same old repeated mistakes! It is 2024, how are you even able to access these devices based on serial number? Some doofus made a quick implementation and it was deployed without anybody checking if the password to the device was ON the device? Wow.

@ocsrc 4 ай бұрын

Why are you not just using a 60 amp outlet ??!! Why are you using a computer in the home charger ??!! That is crazy

@skeptibleiyam1093 4 ай бұрын

Are we talking about home AC chargers or public DC chargers? The examples seem to be the former but some of the graphics look like the latter. My old AeroVironment home charger is about as hackable as a wall socket.

@Netryon 3 ай бұрын

just and AC/DC because that is what it was

@ranggaajibaskara1809 4 ай бұрын

"Unconnected and dumb". My home appliances and my car goes dumb all the time and work perfect. No need to connect

@JohnHartono 4 ай бұрын

Why should Raspberry Pi response to your question? This is like, you questioning knife company, because their knife used as murder weapon, on the other side of the world.

@ShockburnVR 2 ай бұрын

another tip to make it harder for your data to be stolen, create a separate network for the "smart" device

@3_Dogs_In_A_Trench_Coat 4 ай бұрын

IoT is a disaster waiting to happen. Using hobbyist toys makes it even worse and I don't get what has Raspberry got to do wit it, it's like blaming Lego if a building made of its blocks came crashing down.

@Netryon 3 ай бұрын

If that wasn't Pawel Czerwony words you won't know, but building technology is as so.

@kenmore01 4 ай бұрын

Getting a bit tired of the EV issues. I don't have one nor want one, but I'll have to pay a price. Hacked power grids, taxes increasing, insurance increasing, electricity costs going up, vehicles going up in flames, fire department needing new tech to combat the fires, people possibly stealing my data or electricity. Thanks but no thanks. Please figure out how to put all of that on the adopters, not me.

@Netryon 3 ай бұрын

Everybody should learn to ask politicians support for upkeep the things that matter to us.

@jgp6711 4 ай бұрын

Way too many thing are internet connected. And too much faith is put in the producers of new technologies that they can anticipate and prepare for adverse circumstances.

@nua1234 4 ай бұрын

It would be much more secure if the charger electronics were inside the house and only an EV charger socket outside.

@ArabicReja973 4 ай бұрын

China's 🇨🇳 "national security" laws require companies, including BYD, *to assist with intelligence gathering.* - The Chinese government basically knows who is driving, and they can remotely control your car brake system from Beijing.

@RokeJulianLockhart.s13ouq 4 ай бұрын

That's not true. The National Intelligence Law indeed forces any private organisation to provide the PRC government with any information they demand, but that doesn't mean that the companies need to create the capabilities to control every aspect of the products they provide. I doubt that many car manufacturers can be bothered to connect the brakes in the manner you purport.

@fredfred2363 3 ай бұрын

It is true actually. In many areas of China, Teslas have been banned because they pose a security risk to the Chinese gov. It's discussed in a lot of detail on the serpentza channel.

@LabGecko 3 ай бұрын

@@RokeJulianLockhart.s13ouq Every major Chinese company has a party representative sitting in each company building. I doubt he's just there for show.

@RokeJulianLockhart.s13ouq 3 ай бұрын

@@LabGecko Where'd you learn that from?

@PRS-0317 4 ай бұрын

Sensationalized for sure, but just soooo many rookie mistakes by companies rushing to get products to market.

@iancowan3527 3 ай бұрын

For what humanly crazy reason does a car Charger need Internet Service? Because what becomes a very blaring issue - the greatest problem is the unnecessary services to recharge a battery! Not because of needs or requirements - but because they can! Making your own monsters to ensure your services stay in constant demand - poison's the whole pool!

@LabGecko 3 ай бұрын

Corporations make money selling user data to advertising. Connecting is a data source. Until it's illegal, they won't change.

@iancowan3527 3 ай бұрын

@@LabGecko So predicated on ad revenue the entire backbone of a global technology/infrastructure has been subverted to being a cyber target buffet!

@needtoknow3168 4 ай бұрын

why do we need internet to charge something...?

@dfs-comedy 2 ай бұрын

I don't think using a Raspberry Pi compute module is in itself a vulnerability. It depends how the module is set up.

@cinemabunny 4 ай бұрын

Forget weapons. Buy peak load electricity forwards and turn on the chargers on your forward date.

@25anomaly 4 ай бұрын

Found the ex-Enron employee

@GorVala 3 ай бұрын

If person not aware of inner working.. there is huge possibility to get screwed by manufacturers

@dylantaylor490 3 ай бұрын

This isn't surprising - criminals have been skimming gas pumps by opening them up for decades, not surprising some EV chargers are vulnerable to unauthorized modifications too.

@silvy7394 3 ай бұрын

Assumes everyone uses the same model of charger AND some dude goes and has physical access to half the citys chargers without getting caught. Then being able to figure out how to remotely control every device and account. Yeah, never happening.

@vasiovasio 4 ай бұрын

C'mon people, do not give 2024 all these ideas! 😂😂😂

@user-hk3ej4hk7m 3 ай бұрын

"and if I pick your door lock I can get it and read the password from your sticky notes!" What a joke

@user-qv6fe9dy8l 4 ай бұрын

You know these guys could earn in millions if they sold the critical bugs to potential buyers.....finding a bug is really challenging and time consuming. The companies should not get those bugs at that cheap a price.

@GWAForUTBE 4 ай бұрын

No mention of gasaholeline pumps with the same vulnerabilities.

@hughmarcus1 4 ай бұрын

Fuel pumps aren’t connected to the vehicle in the same way. Also, no private owner has a fuel pump on the wall of their house 😉

@GWAForUTBE 4 ай бұрын

@hughM9 fuel pumps / systems fail. It starts fires 280 k Xs a yr. Most houses do have a fuel pump/ system wired into their furnace.

@turdFerguson565 4 ай бұрын

Did anyone else notice him using Kali? Very interesting that they are using that.

@CarbineKiller 4 ай бұрын

eh? if you are in this line without kali that is just strange. or do you mean kali alone has all the tools needed for this work?

@turdFerguson565 4 ай бұрын

The validity of kali wasn’t in question. Rather lots of individuals mock kali and say professional hackers don’t use it. Those individuals would pounce if my first comment was “see he’s using Kali”. Rather I was pointing it out.

@karlmadsen3179 2 ай бұрын

Yeah, so what does this cybersecurity shop use for security? Steel bars screwed on the insides of the windows to the walls. That's pretty old school. Steel bars work.

@dronelabs556 3 ай бұрын

I got fired from my job from white hat hacking. What should I do now. 😂

@vegasromaniac 4 ай бұрын

Who mounts their charger outside ?b

@logitech4873 4 ай бұрын

That's very common. My car is outside, so my charger needs to be outside too.

@JigilJigil 4 ай бұрын

The advantage of the Chinese EVs and chargers is that there is no backdoor for hackers, as CCP has direct access to your data.

@fredfred2363 3 ай бұрын

Correct.

@Netryon 3 ай бұрын

Who it was was it Xiaomi to begin making cars?

@3dkiwi920 3 ай бұрын

"pull out one of the hardware chips; and we can read it and find your personal your data" No sir that is a Raspberry Pi Compute Module 3... Very few chargers will be using them.

@michaeltaylor4271 3 ай бұрын

I’ll say these kinda things are pretty easy to overlook, but that’s the issue if we have fully autonomous cars then these kinds of issues can’t happen, they could take control of a car and steal it or who knows what else, so it’s up to these companies to put together engineering teams that can tackle all these issues extremely quickly and/or making sure that those issues never make it out the door. And I do believe companies are learning, especially from guys in the video and other white hack hackers, but it will take quite a long time and lot of computer engineer