Car Hacking - Why so much in car tech?

[camel_landy]

Stumbled across this earlier:

https://twitter.com/samwcyo/status/159779209717567...

Twitter said:

More car hacking!

Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.

Here's how we found it, and how it works:

To me, it highlights perfectly some of the unintended consequences of in-car tech and the sad thing is, it didn't surprise me in the slightest. Motor manufacturers simply want to nail things together, make them all shiny and push them out of the door. They don't understand all that 'Infosec' type stuff, attack surfaces, protocols, encryption, error checking, etc...

I appreciate the supplier fixed the issue within 24hrs of the issue being reported... But what if it's discovered and ISN'T reported? What if it's discovered when the product is out of warranty, how long will they be providing updates for?

Are the manufacturers really going to be wanting to provide patches for the next 10... 15... 20yrs?

Car 'hacking' isn't a new thing, it has been around for many years but with the ever increasing lust for tech and one-up-manship by marketing departments, I can only see it getting worse.

/DISCUSS=ON

M

[rodericb]

Cripes they were lucky that the people who found this were inclined to report it and not keep it to themselves for lulz or more serious outcomes.