Get your tin hats on

this could be interesting for the 3rd gen tundra and remote connect since toyota and lexus are part of the same telematics service as everyone else.

original article : https://www.techspot.com/news/96848-hackers-found-way-access-personal-information-steal-car.html

 

"Don't panic if you have one of these makes and use its remote functionality. Yuga Labs contacted SiriusXM about the gaping security hole, and it immediately issued a patch before the researchers announced the vulnerability earlier this week"

I never liked having cloud application on any thing from vehicles, coffee makers and servers for that matter. Just introduces unnecessary risk I don't want to deal with.

 

If it’s on a network then it can be hacked. Simple as that.

 

Realistically they should air gap all safety and driving systems on a vehicle. Dealership should be the only way to upgrade these.

 

They’ll do it for a monthly subscription hahaha.

 

but how many other holes are not found YET?

you start with the low hanging fruit then work up to the harder stuff

same issue with last pass, got hacked 2nd time this past week.

 

This is a great discussion and I'm the glad the OP shared this news article. Because if we're reading it in the news, then the gap has been discovered and can be closed.

1990's & Older: Break the window or use a slim jim to get in and bust the steering column...and then steal the vehicle.
1990's - 2000's: Use an OBD key cloner to mimic the physical transponder key....and then steal the vehicle.
2000's - 2020's: Use a transponder scanner to clone the key fob....and then steal the vehicle.
2020's to Present: Hackers break into your mobile...and then steal the vehicle.

This might be a hot take for some folks, but modern cars are still harder to steal than older cars. That being said, if a thief is smart enough they can steal any vehicle. No system will ever be 100% secure.

Don't take me as dismissing this security flaw. Any known security flaw, whether it be hacking a cloud app or realizing the steering column key cylinder is easily picked, should be closed. But, overall...technology has made it harder (not easier) to steal vehicles. Since 1990, the theft rate of vehicles per 100k has declined nearly 60%, even with the recent spike due to macroeconomic & societal factors. In the end, modern technology...for all it's faults & gaps...is working as intended to reduce the overall theft rate.

I'm old school in many ways because of my age, but this is one area where I think technology is really helping. I'll standby for potential hate.

 

Really good to know it’s getting better. I feel the scary portion of this is that instead of the car being stolen there’s a chance to lose a lot of personal information and make it easy to get in steal something and get out without even being noticed.
Makes you wonder what happened to those tie down straps you misplaced lol

 

HAHAHAHA

 

There are lot more hackers nowadays than it was in 1990. They can breach most of/any security countermeasures. I personally have never stolen anything in my life, but I cracked the security in my older Volvo, in order to make car software backups and carry out mods I want: https://github.com/vtl/volvo-cem-cracker While researching it, I figured out how to unlock hardware-locked Renesas chips commonly used in automotive systems. Didn't know back then it was unlocked in Volvo, but it does, for example, in Toyota.

I think a big role in a declined car thefts can be attributed to young people not wanting to own or even driving a car. Car is not a desired possession anymore. Heck, modern cars are not fun anymore, to begin with, why steal them?

 

anyone who bought a house in the history of forever has lost their SSN, addresses and other crap when Equifax was breached. The only hope we have now is that there are so many SSN's floating around out there that your's isnt the one chosen for nefarious purposes.