SoylentNews is people
SoylentNews
Submitted via IRC for SoyCow4408
A Dutch cyber-security firm has discovered that in-vehicle infotainment (IVI) systems deployed with some car models from the Volkswagen Group are vulnerable to remote hacking. Daan Keuper and Thijs Alkemade, security researchers with Computest, said they successfully tested their findings and exploit chains on Volkswagen Golf GTE and Audi A3 Sportback e-tron models (Audi is a brand part of the Volkswagen Group).
The two researchers said used a car's WiFi connection to exploit an exposed port and gain access to the car's IVI, manufactured by electronics vendor Harman. Researchers also gained access to the IVI system's root account, which they say allowed them access to other car data.
"Under certain conditions attackers could listen in to conversations the driver is conducting via a car kit, turn the microphone on and off, as well as gaining access to the complete address book and the conversation history," Computest researchers said. "Furthermore, due to the vulnerability, there is the possibility of discovering through the navigation system precisely where the driver has been, and to follow the car live wherever it is at any given time," researchers added.
Original Paper: The Connected Car Ways to get unauthorized access and potential implications
(Score: 2, Insightful) by Anonymous Coward on Wednesday May 02 2018, @03:40PM
And just what options do people have? I recently bought a new car, and everything I looked at had this functionality in it. Trucks, SUVs, CUVs, Vans, Cars. Everything. There might be a stripped down model somewhere, but I couldn't find it. If feels like a race to the bottom and every manufacturer is participating.
Some will say "buy used!". That is a diminishing option as cars without this functionality age, rust, etc. There is only so much a person can do to keep an old car on the road. And every year that goes by, the less of an option those old cars become for people who need a reliable daily driver. And this is from a person who likes to work on cars. Most people don't.