American Civil Liberties Union

A disgruntled worker at a Texas auto dealership hacked into a vehicle-immobilization system and disabled more than 100 vehicles. Our automobiles are getting more and more computerized, so the threat of hacking vehicles is being taken increasingly seriously, according to this interesting article in CIO Magazine. And as computerization proceeds, with cars tied in to GPS, social networks, and who knows what else, the threat will increasingly be not just to security but also to privacy. Already today’s cars contain as many as 70 independent computers with up to 100 megabytes of code. And, vehicles—perhaps we should start calling them “transportation computers”—are increasingly being plugged into various networks, which greatly increases their vulnerability. Already, the job description “car thief” has come to take on some of the qualities of “hacker,” with today’s thieves plugging into vehicles’ data ports, replicating RFID key fobs, and otherwise manipulating data rather than hardware. It’s always seemed to me that one way to increase the security in cars and other publicly important software, is to require that their code be open source.

Some of the Wikileaks-fueled swirl of stories about the TrapWire program appear to have been overhyped, as my colleague Kade Crockford of the ACLU of Massachusetts noted in her excellent roundup of the story yesterday. Others writing about the program have followed suit.