In a new study, a group of computer scientists from the University of Michigan recently revealed a major vulnerability in an unlikely hacking target: traffic lights.
Using nothing more than a laptop and a wireless card that operated at the same frequency (5.8 gigahertz) as the wirelessly networked traffic lights, the group was able to take control of a number of lights in an unnamed area of Michigan (they had the permission of local authorities). This meant that they could alter the normal timing pattern of the lights, turning all the lights along a given route green, for instance, or freezing an intersection with all reds.
An estimated 62 percent of traffic lights nationwide are networked — many via wireless radios —so they can communicate with other intersections or a central server to optimize the flow of traffic. But, at least in some places, designers have taken no steps to protect these systems from outside threats.
The system tested by the researchers broadcast an unencrypted wireless network that was visible on normal laptops and smartphones, although they can't normally connect to it. But it only took a tiny bit of extra work for the researchers to do so, in part because whoever installed the system left default user names and passwords in place.
Once they had access, they could use a series of simple commands to freeze the traffic lights in their current state, or turn all lights red, or alter the timing of the light changes. The one thing they couldn't do was give all sides of an intersection a green light — that'd take physical access to the roadside traffic cabinet housing failsafe equipment, which automatically switches the whole intersection to a flashing red if a dangerous configuration occurs.
Still, the ease with which they took control of the lights is disturbing. That kind of control could easily allow someone to disastrously disrupt the flow of traffic in a busy area, and while it's uncertain whether all systems are so poorly protected, similar vulnerabilities have been found by others in cities across the US.
(Thanks to MIT Technology Review for the link.)
Correction: This previously stated that 62 percent of traffic lights are wirelessly connected. 62 percent are connected, but some fraction of those are connected through cables.
Katika utafiti wa hivi karibuni, wanasayansi wa kompyuta kutoka Chuo Kikuu cha Michigan wamefunua udhaifu mkubwa katika lengo lisilo la kawaida la hacking: taa za trafiki. Kwa kutumia kompyuta ndogo na kadi ya wireless ambayo ilifanya kazi kwa mzunguko sawa (gigahertz 5.8) na taa za trafiki zilizoshikamana kwa wireless, kundi hilo liliweza kuchukua udhibiti wa taa kadhaa katika eneo lisilojulikana la Michigan (walikuwa na ruhusa ya mamlaka za mitaa). Hii ilimaanisha kwamba wangeweza kubadilisha muundo wa kawaida wa muda wa taa, kugeuza taa zote kando ya njia fulani ya kijani, kwa mfano, au kufungia makutano na nyekundu zote. Inakadiriwa kuwa asilimia 62 ya taa za barabarani nchini kote zimeunganishwa kwa mtandao - nyingi kupitia redio zisizo na waya - ili waweze kuwasiliana na makutano mengine au seva kuu ili kuboresha mtiririko wa trafiki. Lakini, angalau katika sehemu fulani, wabuni hawajachukua hatua yoyote ya kulinda mifumo hiyo kutokana na vitisho vya nje. Mfumo huo uliotumiwa na watafiti ulitoa mawasiliano ya wireless bila encryption ambayo yalionekana kwenye kompyuta za kawaida na simu za mkononi, ingawa kwa kawaida hawawezi kuunganishwa nayo. Lakini ilichukua tu kidogo ya kazi ya ziada kwa watafiti kufanya hivyo, kwa sehemu kwa sababu yeyote aliyeweka mfumo aliacha majina ya mtumiaji na nywila za default mahali. Baada ya kupata upatikanaji, wanaweza kutumia mfululizo wa amri rahisi kuzima taa za trafiki katika hali yao ya sasa, au kugeuza taa zote nyekundu, au kubadilisha wakati wa mabadiliko ya taa. Jambo moja hawakuweza kufanya ilikuwa kutoa pande zote za makutano mwanga kijani - kwamba ingekuwa kuchukua upatikanaji wa kimwili kwa barabara kando ya trafiki baraza la mawaziri nyumba failsafe vifaa, ambayo moja kwa moja hubadilisha makutano yote kwa flashing nyekundu kama Configuration hatari hutokea. Hata hivyo, urahisi ambao walichukua udhibiti wa taa hizo ni wenye kusumbua. "Kuna uwezekano mkubwa kwamba mtu anaweza kuvuruga trafiki katika eneo lenye shughuli nyingi, na ingawa haijulikani ikiwa mifumo yote ni ""haijalindwa vizuri,"" udhaifu kama huo umepatikana na wengine katika miji ya Marekani." (Kutokana na MIT Technology Review) Kwa mfano, katika ripoti ya hivi karibuni, ilibainishwa kuwa 62% ya taa za barabarani zimeunganishwa kwa wireless. Kwa kweli, asilimia 62 ya watu wana uhusiano wa umeme, lakini ni sehemu ndogo tu ya watu wanaohusiana kupitia kebo.