Good ideas and conversation. No ads, no tracking. Login or Take a Tour!
- Mr Hunt discovered that anyone can control the heating and air conditioning systems of a stranger's Leaf by sending it commands via a web browser because the car's companion app was not configured to verify the owner's identity.
Instead, it only required a vehicle identification number (Vin).
Wow. That's one hell of an oversight.
user-inactivated · 3411 days ago · link ·
This comment has been deleted.
–
user-inactivated · 3410 days ago · link ·
I'm thinking that maybe having cars work with smart phones is a minimal effort, affordable gimmick that can help companies sell cars to some people. So I see why it's done. But not even having any actual security? That's crazy. Technically, what's going on in this article doesn't really seem like hacking to me, in my opinion. It's like the car's VIN is a phone number and you're just dialing in to it. There's no code breaking or spoofing or anything. Crazy.