- cross-posted to:
- technology@beehaw.org
- cross-posted to:
- technology@beehaw.org
cross-posted from: https://feddit.org/post/3121891
The Commerce Department said Monday it’s seeking a ban on the sale of connected and autonomous vehicles in the U.S. that are equipped with Chinese and Russian software and hardware with the stated goal of protecting national security and U.S. drivers.
[…]
The measure announced Monday is proactive but critical, the agency said, given that all the bells and whistles in cars like microphones, cameras, GPS tracking and Bluetooth technology could make Americans more vulnerable to bad actors and potentially expose personal information, from the home address of drivers, to where their children go to school.
In extreme situations, a foreign adversary could shut down or take simultaneous control of multiple vehicles operating in the United States, causing crashes and blocking roads, U.S. Secretary of Commerce Gina Raimondo told reporters on a call Sunday.
“This is not about trade or economic advantage,” Raimondo said. “This is a strictly national security action. The good news is right now, we don’t have many Chinese or Russian cars on our road.”
But Raimondo said Europe and other regions in the world where Chinese vehicles have become commonplace very quickly should serve as “a cautionary tale” for the U.S.
Security concerns around the extensive software-driven functions in Chinese vehicles have arisen in Europe, where Chinese electric cars have rapidly gained market share.
“Who controls these data flows and software updates is a far from trivial question, the answers to which encroach on matters of national security, cybersecurity, and individual privacy,” Janka Oertel, director of the Asia program at the European Council on Foreign Relations, wrote on the council’s website.
[…]
A senior administration official said that it is clear from terms of service contracts included with the technology that data from vehicles ends up in China.
Raimondo said that the U.S. won’t wait until its roads are populated with Chinese or Russian cars.
[…]
The proposed rule would prohibit the import and sale of vehicles with Russia and China-manufactured software and hardware that would allow the vehicle to communicate externally through Bluetooth, cellular, satellite or Wi-Fi modules. It would also prohibit the sale or import of software components made in Russia or the People’s Republic of China that collectively allow a highly autonomous vehicle to operate without a driver behind the wheel. The ban would include vehicles made in the U.S. using Chinese and Russian technology.
[…]
The new rule follows steps taken earlier this month by the Biden administration to crack down on cheap products sold out of China, including electric vehicles, expanding a push to reduce U.S. dependence on Beijing and bolster homegrown industry.
I wonder if this could be a step in the direction of forcing manufacturers to allow custom/open source/audited software in all vehicles. If it can be done in some foreign-made vehicles, it can be done in domestically made ones too.
Also note that it says “connected and autonomous vehicles”. If that means two categories, “connected vehicles” and “autonomous vehicles”, it could be quite broadly applied to vehicles that download updates over the air. If it means “autonomous vehicles that are connected” it could be somewhat narrow and an easy work around is to leave the autonomous vehicles disconnected from the internet. I’m not sure how much self-driving abilities are run on servers?
They may also mean “connected” in the sense of cars connected to each other. Having autonomous cars updating each other in real time to the positions and destinations would be a huge leap forward for automation, but is also a dangerous attack vector if a foreign actor poisoned that data.
Good point! If vehicles are communicating like that, which I’ve always thought would be the ultimate for efficiency, you’d have to protect against poison pills. That would be even more difficult with disparate systems cooperating.
Reminds me of the car “chase” scene in I, Robot.
When a light turns green every car should start accelerating at the same time, it doesn’t happen with people driving. Traffic jams will plummet with cars communicating eventually. It’s far off but it would be nice.
It’s not…it’s a step in the direction of making sure the government knows everything about you at all times.