this post was submitted on 27 Sep 2024
118 points (95.4% liked)

Technology

59174 readers
3700 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
118
Flaw in Kia’s web portal let researchers track, hack cars (arstechnica.com)
submitted 1 month ago by [email protected] to c/[email protected]
10 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 6 points 1 month ago* (last edited 1 month ago) (2 children)

I was gonna say they still need the fob for the car to actually drive it, but saw it mentioned in the article. I don't have a Kia (used to, but traded it in because of the immobilizer shit), but my car right now has an app to remote-start, but the car itself won't let you drive it if you don't have the fob on you while sitting in the driver's seat.

The group’s web-based Kia hacking technique doesn’t give a hacker access to driving systems like steering or brakes, nor does it overcome the so-called immobilizer that prevents a car from being driven away, even if its ignition is started. It could, however, have been combined with immobilizer-defeating techniques popular among car thieves or used to steal lower-end cars that don't have immobilizers.

But yes, that's just bad security.

[–] [email protected] 7 points 1 month ago

It's still mindboggling that Kia sells any cars without immobilizers.

I get they're cheap cars and the way they're cheap is to skimp on everything but uh, maybe that's not the right place to skimp?

[–] [email protected] 1 points 1 month ago* (last edited 1 month ago)

2FA where one of the factors is Bluetooth to the fob might be OK, assuming the Bluetooth link is secured in some way.