These guys tracked down an expert car thief and got him to explain how he can steal cars in under 30 seconds.
tl;dr: Most modern cars contain well-known software vulnerabilities that are accessible through the OBD2 connector. Unscrupulous Chinese manufacturers have cataloged and automated these exploits using tablets and OBD2 adapters, and you can buy these tools freely and legally online. You may need a blank key fob from the right manufacturer, but the app literally automates the job.
Car makers have been shipping vulnerable software for decades without consequence (car owners and dealerships end up paying for theft, not manufacturers), and they continue to do so. Only Ford appears to be improving their security.
#cars #cyberSecurity
https://www.youtube.com/watch?v=YS2K_quFWuY
Dave Rahardja (he/him) /
npub10w…rf0qm
2024-08-24 23:49:49
Author Public Key
npub10wnp0q097e5z76rm838d9f59dz5lfvw2xvwvr32lnpye0vrdjfqqdrf0qmSeen on
wss://relay.momostr.pinkPublished at
2024-08-24 23:49:49Event JSON
{
"id": "33861516f36f118364b36a270cf95bf900815196aa353b721ce2adf87c9ba25f",
"pubkey": "7ba61781e5f6682f687b3c4ed2a68568a9f4b1ca331cc1c55f984997b06d9240",
"created_at": 1724543389,
"kind": 1,
"tags": [
[
"t",
"cars"
],
[
"t",
"cybersecurity"
],
[
"proxy",
"https://sfba.social/@drahardja/113019675581379280",
"web"
],
[
"proxy",
"https://sfba.social/users/drahardja/statuses/113019675581379280",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://sfba.social/users/drahardja/statuses/113019675581379280",
"pink.momostr"
],
[
"-"
]
],
"content": "These guys tracked down an expert car thief and got him to explain how he can steal cars in under 30 seconds.\n\ntl;dr: Most modern cars contain well-known software vulnerabilities that are accessible through the OBD2 connector. Unscrupulous Chinese manufacturers have cataloged and automated these exploits using tablets and OBD2 adapters, and you can buy these tools freely and legally online. You may need a blank key fob from the right manufacturer, but the app literally automates the job.\n\nCar makers have been shipping vulnerable software for decades without consequence (car owners and dealerships end up paying for theft, not manufacturers), and they continue to do so. Only Ford appears to be improving their security.\n\n#cars #cyberSecurity \n\nhttps://www.youtube.com/watch?v=YS2K_quFWuY",
"sig": "3de676844105b1c2e7fcce14509b72bd89795f4ba5e2294e1bd8cfd399fda86f4114b845049ca44acb3926c21466ec6f24b597d7d6c91e4d0a761f0be091870c"
}