Hyundai ‘Blue Link’ Vulnerability Allows Thieves To Start Cars Remotely

[Lucian Armasu]

Hyundai's use of cleartext communications and hardcoded passwords may have allowed car thieves to remotely unlock and then steal Hyundai cars (2012 and newer).

Hyundai ‘Blue Link’ Vulnerability Allows Thieves To Start Cars Remotely : Read more

 

[ddpruitt]

Just another reason not to buy Hyundai. Can't build cars can't build software.

 

[Guest]

You can start the car, doesn't mean you can drive it.

 

[hannibal]

And so it begins... Soon this will be epidemic in all cars that have been made after year 1970...

 

[hellwig]

There's an even bigger security risk. Did you know Hyundai makes their windows out of a fragile silicon-based GLASS? You don't even need fancy hacking tools, you can break into most Hyundai's with something as primitive as a rock. This affects ALL MODEL YEARS, yet, hasn't been covered by any news outlets to date.

Seriously though, this is only going to get more common as the "Internet of Things" expands. Not a week goes by where something that doesn't really need to be connected to the internet, but is, is hacked.

 

[jimmysmitty]

You can start the car, doesn't mean you can drive it.

That is correct. While you can remote start the car and lock/unlock it with a phone application the car still requires the key fob to be inside the vehicle to drive.

Instead of adding a remote start to the key fob they set it up through a "OnStar" like system using the phone but it still follows the rules of any car that uses a remote start system, the key fob or key still needs to be present in the system for it to do anything more than idle for 10 minutes.

However, it is a pretty big security flaw and needs to be addressed and fixed ASAP. At minimum that key should be encrypted with 256bit encryption.

 

[captaincharisma]

Just another reason not to buy Hyundai. Can't build cars can't build software.

they're still more reliable vehicles then any made by the US automakers

 

[dogofwars]

Should use software like signal to use in their cars.

 

[redgarl]

If you think this will only affect Hyundai, you are mistaken. It will be a huge issue for car manufacturers since they are not software developers.

 

[hst101rox]

Car manufactures are software developers with all the ECUs in modern cars and an electric vehicle wing in many. Though not educated enough with security though.

 

[hst101rox]

How would they get that hardcoded password? Brute force, or is it the same password for every Hyundai user 1986l12Ov09e?