According to findings from the University of Birmingham, a vulnerability in security code could allow thieves to break into almost all Volkswagens produced since 1995.
The vulnerability has been found by University of Birmingham computer scientist Flavio Garcia and a team of researchers. Garcia is already familiar with VW security. In 2013, he found a security lapse that allowed his research team to start the ignition on millions of Volkswagens. His results were delayed until last year, because of a lawsuit, but now he’s back at it.
The vulnerability affects a number of other brands, including Ford, Fiat, Nissan, and more, say the researchers and the attacks use cheap and readily available technology.
“The cost of the hardware is small, and the design is trivial,” Garcia tells Wired. “You can really build something that functions exactly like the original remote.”
The attack still requires a bit of creativity, and Garcia isn’t revealing some of the finer details of how they are accomplished, but it’s suspected that similar attack might already be occurring. Earlier this month, for instance, more than 30 Jeeps were stolen in Texas with what looked like laptops.
The only good news is that Volkswagen seems to be getting wise to the vulnerability. The Mk7 Golf appears to be immune to the attack that Garcia discovered.
More good news is that the designer of the security algorithm, NXP, is also wise to the vulnerability and has been steadily improving the system. For now, though, Garcia recommends that owners not leave valuables in their cars.
The post Security Vulnerability Could Put Millions of Volkswagens at Risk appeared first on VWVortex.
from VWVortex http://ift.tt/2aVK7aR
via IFTTT
Comments
Post a Comment