BMW, Audi and Toyota cars can be unlocked and started with hacked radios
1–10 of 118 posts
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#2Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#3The auto manufacturers (and for that matter all the "IoT" creators) couldn't give two shits about protecting consumers. Building security into this stuff is trivial and a responsibility.
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#4Samy Kamkar had a great talk about radio attacks at DEF CON 23: https://www.youtube.com/watch?v=UNgvShN4USU
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#5Not my BMW, it's 25 years old and the driver's side door doesn't unlock even if you use a key :P
All jokes aside (although it's true about my car), it just seems like a fundamental truth that digitally-secured systems always provide convenience at the cost of, well, security.
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#6The auto manufacturers (and for that matter all the "IoT" creators) couldn't give two shits about protecting consumers. Building security into this stuff is trivial and a responsibility.
Could you say more about those things they should be doing?
I'm naive but it doesn't seem trivial to me.
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#7Not my BMW, it's 25 years old and the driver's side door doesn't unlock even if you use a key :P All jokes aside (although it's true about my car), it just seems like a fundamental truth that digitally-secured systems always provide convenience at the cost of, well, security.
It's worth noting that non-digitally-secured cars (pre chip-in-the-key tech) provided very little security themselves. Slim jims, hotwiring...
The wireless bit does seem like a big regression over non-wired digital security, though.
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#8The auto manufacturers (and for that matter all the "IoT" creators) couldn't give two shits about protecting consumers. Building security into this stuff is trivial and a responsibility.
Could you say more about those things they should be doing? I'm naive but it doesn't seem trivial to me.
Round trip times? Can't cheat the speed of light, assuming you can't spoof the transmission.
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#9Not my BMW, it's 25 years old and the driver's side door doesn't unlock even if you use a key :P All jokes aside (although it's true about my car), it just seems like a fundamental truth that digitally-secured systems always provide convenience at the cost of, well, security.
In the "Win" column for digitally-secured systems, the electronic immobilizer basically eliminated auto theft. The cars that are still stolen in significant numbers are the last model-years to not have immobilizers.
Car door locks are immaterial anyway, since any thief is just going to break a window. The immobilizer matters, certainly, but even an immobilizer vulnerable to sophisticated attackers is doing two orders of magnitude better than purely mechanical security.
[1] http://www.nytimes.com/2014/08/12/upshot/heres-why-stealing-...
Re: BMW, Audi and Toyota cars can be unlocked and started with hacked radios
#10Not my BMW, it's 25 years old and the driver's side door doesn't unlock even if you use a key :P All jokes aside (although it's true about my car), it just seems like a fundamental truth that digitally-secured systems always provide convenience at the cost of, well, security.
[deleted]