Security researchers Charlie Miller and Chris Valasek have once again exposed automobile security flaws that allow attackers to take over a vehicle’s crucial systems. In their latest work, they learned how an attacker could remotely control a car over the Internet. Vehicle manufacturers dismissed prior warnings about flawed security by claiming [PDF] that the exploits relied on physical access to the car. But it has long been known that vehicles’ wireless systems (such as Bluetooth) contain vulnerabilities that would allow a malicious hacker to gain access to critical vehicle functions. Miller and Valasek took it one step further, revealing one dramatic way that drivers have been left vulnerable in manufacturers’ race to connect vehicles to the Internet. This particular vulnerability relates to Chrysler’s Uconnect system, but it would be naive to imagine that no other vehicles have similar vulnerabilities. One major reason that serious vulnerabilities…
↧