Car Makers Haven’t Learned, Part 2: Same App Security Issues, 6 Months Hence

[Lucian Armasu]

In a second part of its security analysis of carmakers mobile application, Kaspersky found that not only did the carmakers not fix previously discovered vulnerabilities in their applications, but some of them haven't even updated their apps at all.

Car Makers Haven’t Learned, Part 2: Same App Security Issues, 6 Months Hence : Read more

 

[3ogdy]

Left Column:
_________
OnStar (Opel / Vauxhall)
Porsche Car Connect

Right Column:
Volvo On Call
Kia
My BMW Remote

 

[falchard]

But the only car maker who moved to secure their vehicles infotainment system was FCA. All the rest pretty much swept it under the rug.

 

[Olle P]

What does the insurance companies say about this?
It's no different to having doors that are extremely easy to pick without causing a scratch. I'd be very weary about buying one of these cars, and if I already owned one I'd remove the app ASAP.

 

[Sveg]

This is getting beyond ridiculous. There needs to be a new fine for a company bluntly ignoring a well known issue, and only addressing it when it becomes a national issue

 

[Co BIY]

My would the car companies want their car more secure than the competition ? When it's stolen, the owner gets reimbursed by insurance and promptly buys a new model.

The loss is small to owner, and even the insurance company needs a certain level of losses to keep everyone making monthly payments. The incentives are just all pushing against making costly changes.

 

[Olle P]

... When it's stolen, the owner gets reimbursed by insurance...

That's just it. If the car gets stolen this way, or by the use of (illegal) duplicate keys, the insurance company cry "fraud" and give the owner nothing!