Not content with scaring the bejesus out of Chrysler owners, Wired has uncovered a hacker who says he can open a GM car with OnStar, start it or track it remotely. The only thing he can't do is put the car in gear or steer it, which still requires a key.
Hacker Samy Kamkar says his $100 device can seriously annoy — or seriously rob — a GM car owner if he wanted it to. GM promptly responded by saying it fixed the flaw in a way that owners won't have update their cars.
Kamkar said his exploit wasn't mean to cause mayhem, but rather to show how modern, technological cars can be vulnerable to hackers.
Kamkar's hack wasn't as simple as the St. Louis duo's Uconnect exploit that prompted a recall earlier this month.
A WiFi-enabled box would be attached to the target vehicle and emulate a well-known network, such as a popular coffee shop hotspot. Assuming the user logged onto the phony network and launched the GM RemoteLink app, Kamkar's hack could retrieve the car's data, including position. Kamkar could unlock the doors — or start the car.
"As soon as you're on my network and you open the app, I've taken over," Kamkar told Wired.
Kamkar said he's only tried the hack on his friend's 2013 Chevrolet Volt, but he's confident the system would work on any OnStar-enabled car.
GM said it became aware of the hack a few days ago and patched the issue within hours of the story's publish earlier today.
Surprisingly, this photo is provided by the manufacturer.
The post OnStar Hack Can Open Doors, Start Car, Track Driver appeared first on The Truth About Cars.
from The Truth About Cars http://ift.tt/Jh8LjA
Put the internet to work for you.
No comments:
Post a Comment