Wireless device in two million cars wide open to hacking
(Ars):
http://arstechnica.com/security/2015/01/wireless-device-in-two-million-cars-wide-open-to-hacking/
"An electronic dongle used to connect to the onboard diagnostic systems
of more than two million cars and trucks contains few defenses against
hacking, an omission that makes them vulnerable to wireless attacks
that take control of a vehicle, according to published reports.
US-based Progressive Insurance said it has used the SnapShot device in
more than two million vehicles since 2008. The dongle tracks users'
driving to help determine if they qualify for lower rates. According
to security researcher Corey Thuen, it performs no validation or
signing of firmware updates, has no secure boot mechanism, no cellular
communications authentication, and uses no secure communications
protocols. SnapShot connects to the OBDII port of Thuen's 2013 Toyota
Tundra pickup truck, according to Forbes. From there, it runs on the
CANbus networks that control braking, park assist and steering, and
other sensitive functions."
- - -
Waiting to hear what FLO has to say about this ...
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
I am a consultant to Google -- I speak only for myself, not for them.
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
