Get the latest tech news
Flaw in Kia’s web portal let researchers track, hack cars | Bug let researchers track millions of cars, unlock doors, and start engines at will.
Bug let researchers track millions of cars, unlock doors, and start engines at will.
When security researchers in the past found ways to hijack vehicles' Internet-connected systems, their proof-of-concept demonstrations tended to show, thankfully, that hacking cars is hard. The group’s web-based Kia hacking technique doesn’t give a hacker access to driving systems like steering or brakes, nor does it overcome the so-called immobilizer that prevents a car from being driven away, even if its ignition is started. When the researchers sent commands directly to the API of that website—the interface that allows users to interact with its underlying data—they say they found that there was nothing preventing them from accessing the privileges of a Kia dealer, such as assigning or reassigning control of the vehicles' features to any customer account they created.
Or read this on r/technology