Yes, Amazon is now offering free in-car delivery to customers in some cities.
If you’re comfortable with a stranger remotely unlocking your car, of course.
Published April 24, 2018 4:41 pm in Uncategorized 4
Yes, Amazon is now offering free in-car delivery to customers in some cities.
If you’re comfortable with a stranger remotely unlocking your car, of course.
A firm which sells Xenon HID headlight conversion kits, reversing cameras, parking sensors and other high-tech gear for motorists, has warned customers to be wary after a security breach.
Published August 17, 2017 3:43 pm in Denial of Service, Vulnerability 2
“You could disable the air bags, the anti-lock brakes, or the door locks, and steal the car,” says researcher.
David Bisson reports.
Published August 15, 2017 3:07 pm in Uncategorized 1
A benevolent hacker has helped a family regain access to their car after they misplaced its corresponding one-of-a-kind key.
David Bisson reports.
Published April 26, 2017 2:59 pm in Vulnerability 1
Hyundai tells customers to update their Blue Link smartphone app to protect against hackers targeting their cars.
David Bisson reports.
The Lazarus malware attempts to trick you into believing it was written by Russians, second-hand connected cars may be easier to steal, and is your child a malicious hacker?
All this and more is discussed in the latest podcast by computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault.
Oh, and Carole gets Graham and Vanja to apologise for mistakes of their past…
Published February 20, 2017 5:24 pm in Guest blog, Mobile, Vulnerability 0
Until more effort is made by vendors to integrate the internet in a safe way into the myriad of devices that surround us, we are going to hear more and more stories of security breaking down like this.
Read more in my article on the We Live Security blog.
Published September 20, 2016 1:22 pm in Vulnerability 6
Chinese hackers literally open a backdoor on a Tesla car…
Published September 13, 2016 3:32 pm in Guest blog, Security threats, Vulnerability 0
US motor company General Motors is recalling four million vehicles worldwide due to a software bug that has been linked to at least one death.
Read more in my article on the Hot for Security blog.
Published August 11, 2016 8:25 am in Encryption, Law & order, Link list, Vulnerability 2
Wired writes:
Later this week at the Usenix security conference in Austin, a team of researchers from the University of Birmingham and the German engineering firm Kasper & Oswald plan to reveal two distinct vulnerabilities they say affect the keyless entry systems of an estimated nearly 100 million cars. One of the attacks would allow resourceful thieves to wirelessly unlock practically every vehicle the Volkswagen group has sold for the last two decades, including makes like Audi and Skoda. The second attack affects millions more vehicles, including Alfa Romeo, Citroen, Fiat, Ford, Mitsubishi, Nissan, Opel, and Peugeot.
The researchers are led by University of Birmingham computer scientist Flavio Garcia, who was previously blocked by a British court, at the behest of Volkswagen, from giving a talk about weaknesses in car immobilisers.
At the time Volkswagen argued that the research could “allow someone, especially a sophisticated criminal gang with the right tools, to break the security and steal a car.” That researchers finally got to present their paper a year ago, detailing how the Megamos Crypto system – an RFID transponder that uses a Thales-developed algorithm to verify the identity of the ignition key used to start motors – could be subverted.
The team’s latest research doesn’t detail a flaw that in itself could be exploited by car thieves to steal a vehicle, but does describe how criminals located within 300 feet of the targeted car might use cheap hardware to intercept radio signals that allow them to clone an owner’s key fob.
The researchers found that with some “tedious reverse engineering” of one component inside a Volkswagen’s internal network, they were able to extract a single cryptographic key value shared among millions of Volkswagen vehicles. By then using their radio hardware to intercept another value that’s unique to the target vehicle and included in the signal sent every time a driver presses the key fob’s buttons, they can combine the two supposedly secret numbers to clone the key fob and access to the car. “You only need to eavesdrop once,” says Birmingham researcher David Oswald. “From that point on you can make a clone of the original remote control that locks and unlocks a vehicle as many times as you want.”
Sounds to me like it’s time to turn to the car manufacturers to ask what on earth they are going to do to fix the millions of potentially vulnerable vehicles they have sold in the last couple of decades.
Read more, including the researcher’s paper, on Wired.
Published August 2, 2016 12:47 pm in Guest blog, Vulnerability 0
What car hacking researchers Charlie Miller and Chris Valasek have discovered is worrying enough. But it sends a shudder down the spine to even contemplate how much worse things could be.
Read more in my article on the We Live Security blog.
Published June 7, 2016 1:16 pm in Vulnerability 0
If you’ve got a Mitsubishi Outlander hybrid electric car then you’ve also got a problem.
Read more in my article on the Hot for Security blog.
So, err… What happens when your iPhone battery dies?
Check out my latest video to find out more.
Published September 11, 2015 11:22 am in Guest blog, Vulnerability 0
Researchers warned General Motors that millions of its cars and trucks were vulnerable to attacks as far back as the spring of 2010.
Guess how long it took them to fix the problem…
Read more in my article on the Hot for Security blog.
Published August 17, 2015 12:17 pm in iOS, Vulnerability 8
A researcher who has already found security holes impacting GM cars, has turned his attention to the iOS apps of other vehicle manufacturers.
Heaven help us as the internet of things continues its steady expansion, with so little thought as to privacy and security.
Published August 17, 2015 11:30 am in Encryption, Guest blog, Law & order, Vulnerability 0
Researchers explain how they managed to wirelessly lockpick car immobilisers - a technique which could also be used by sophisticated car thieves, stealing expensive cars to order.
Read more in my article on the Hot for Security blog.