ETHICS IN COMPUTER SCIENCE Hacking and identity theft

Driverless cars  Possible benefits?  Possible dangers?

Automobile hacking  A research team was able to remotely:  disable the brakes, selectively brake individual wheels on demand, stop the engine  Carry out an attack that embeds malicious code in a car’s telematics unit and completely erases any evidence of its presence after a crash.  “We were able to release the brakes and actually prevent our driver from braking; no amount of pressure on the brake pedal was able to activate the brakes”  “We discuss the complex challenges in addressing these vulnerabilities” Experimental Security Analysis of a Modern Automobile Karl Koscher, Alexei Czeskis, Franziska Roesner, Shwetak Patel, Tadayoshi Kohno, Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, and Stefan Savage 2010 IEEE Symposium on Security and Privacy

How does this impact your thinking on driverless cars?

 Is this different from physically cutting someone’s brake lines?  Is stealing someone’s credit card number different from stealing their wallet?

Is it OK for security researchers to expose vulnerabilities in existing systems?  Black hat vs white hat

Identity theft  You can buy credit card numbers over the internet for $.25 ea.  How many of you have credit cards?  Have you gotten a call from the identity protection unit? Large data breaches are a relatively small contributor  Keystroke loggers  Improperly sanitized ewaste  Phishing  Guessing social security numbers from fb info  Hackers buy malware  Low-tech: garbage, fake phone calls…  Also: Criminal identity theft

Hacking is really different from writing code