Nobody ever thinks it will happen to them or their systems.
I’m talking about building a digital defense and cybersecurity vulnerabilities.
Heads up Harley-Davidson! The more connected motorcycles become, the more likely they are to get hacked. Each new “connected” motorcycle feature introduces greater complexity, and with complexity inevitably comes vulnerability.
Motorcycle enthusiasts have spoken and Harley-Davidson listened. Riders want increased connectivity not simply for productivity’s sake, but also for convenience. It’s easier to, for example, interact through the head unit and display an interactive map as the motorcyclist drives towards their destination, versus putting the address into the user’s cell phone’s app and trying to watch the map on the phone and drive. So, riders use apps for Android and iPhone (Apple CarPlay), that leverage the smartphone for the head unit (HU) display.
At what point does the motorcycle become a data center on two-wheels? Any part of the motorcycle that talks to the outside world is a potential inroad for attackers. And malicious actors have been incredibly productive, creating immense numbers of threats world-wide.
Do you think I’m ‘inflating’ this out of proportion?
Car versus motorcycle hacking makes great headlines and let’s take a look at a few recent vehicle examples: a moving Tesla Model S is hacked and the hacker remotely controls the brakes (Tesla was forced to develop and distribute a software update to resolve); a Jeep Cherokee was remotely accessed via the UConnect entertainment center from a laptop miles away and disabled it’s transmission (Fiat Chrysler, was forced to recall 1.4M vehicles); a 100M Volkswagen vehicles can be unlocked by hacking the signals from their keyless entry fobs; and then there was Hyundai’s Blue Link, a cell phone application for users to interact with their vehicle. Users are able to lock, unlock, start and stop the air conditioning or heat, and start the vehicle from a remote location. In addition, the app allows for stolen vehicle recovery and vehicle health reports to be emailed to the user and other parties for scheduling service etc.
SOUND FAMILIAR?
Consider that earlier this year the Harley‑Davidson™ App and the H-D™ Connect service launched which allows owners to connect remotely to select 2020 Touring and LiveWire motorcycles. The H-D Connect service provides cellular connectivity that can link a Touring and LiveWire owners with their motorcycle through their smartphone using the Harley-Davidson App. H-D Connect allows owners to connect remotely to their motorcycles and allows for viewing of key vehicle health information as well as stolen vehicle recovery and other parties for scheduling service etc.
A computerized motorcycle’s main defense against hacking used to be the fact that all of its systems were separated from any network. But with the rise of telematics systems, connected apps, and onboard WiFi, that’s no longer the case. Harley-Davidson owners now face similar security issues to computers or smartphones and, like those devices, “ironclad” software is the main line of defense and will be as susceptible to attack, just as the user’s home and office PC are.
I’ve previously posted about the larger Internet of Things (IoT). Basically, this means everything in your home that connects to the world wide web. Smart TVs, digital assistants, smart watches, fitness trackers, home security devices, thermostats, refrigerators, and even light bulbs are all on the connected list. Add to that all of the fun stuff: remote-controlled robots; games and gaming systems; interactive dolls; and talking stuffed animals … the list is endless.
And now we have connected Harley-Davidson motorcycles. What do all of these have in common? They send and receive data. The essence of the Harley-Davidson digital transformation is interconnectivity. Interconnectivity is about more than the connections between devices — it is about the connections between customers, partners, and suppliers. But, do you know how that data is collected, where it is stored, for how long and where it is going?
It’s not clear how serious Harley-Davidson takes the threat of potential cyberattacks on their motorcycles. Given the concerns of hackers doing a “drive-by” on your digital life and the number of malicious actors I’d like to see more transparency from them in regards to motorcycle digital defense — or we risk ending a road trip before it really begins.
Harley-Davidson Privacy Policy – HERE
Harley-Davidson Information Sharing Policy – HERE
FBI 2018 Internet Crime Report (PDF) – HERE
Photo courtesy of Cyber Defense Magazine and FBI
All Rights Reserved © Northwest Harley Blog
Like this:
Like Loading...
Read Full Post »
Northwest Harley Blog 