Shubham Shah and Sam Curry chained a ForgeRock WAF bypass into code execution on the identity systems of two automakers, then demonstrated remote vehicle control in the US.
It’s Toyota/Lexus. And these researchers have hacked most brands, including bmw, Mercedes, ford, Honda, Acura, Kia, Hyundai, Nissan, Infiniti, rolls Royce, Ferrari, Porsche, Jaguar, and any car that has start with Sirius XM. https://samcurry.net/web-hackers-vs-the-auto-industry
Worth noting that by the time Ghost Dog came out, those handheld unlock devices were already in use. Remote lock/start hasn’t been a secure feature at any point. ☝🏼
The one he used in the movie (sorry, very minor spoiler) predates most of those. If memory serves, I first heard of keyless entry for cars in the mid-90s (late 80s for homes?) and it was maybe a year before cars were being boosted via roll-jam/clone handhelds— essentially phreakboxes.
I say “most” as keyless entry/start features weren’t widely offered, much less standard-ish until ~'00 and Ghost Dog came out in '99. I’m sure there are outliers, is all. 😉
For anyone who doesn’t want to dig through the article, they obfuscated the manufacturers and didn’t name them.
It’s Toyota/Lexus. There’s a video with the cars.
That does it, I’m never buying a Lexus!
Probably Hyundai/Kia since they already had a similar problem
It’s Toyota/Lexus. And these researchers have hacked most brands, including bmw, Mercedes, ford, Honda, Acura, Kia, Hyundai, Nissan, Infiniti, rolls Royce, Ferrari, Porsche, Jaguar, and any car that has start with Sirius XM. https://samcurry.net/web-hackers-vs-the-auto-industry
Worth noting that by the time Ghost Dog came out, those handheld unlock devices were already in use. Remote lock/start hasn’t been a secure feature at any point. ☝🏼
the flipper or just keyfobs in general?
The one he used in the movie (sorry, very minor spoiler) predates most of those. If memory serves, I first heard of keyless entry for cars in the mid-90s (late 80s for homes?) and it was maybe a year before cars were being boosted via roll-jam/clone handhelds— essentially phreakboxes.
I say “most” as keyless entry/start features weren’t widely offered, much less standard-ish until ~'00 and Ghost Dog came out in '99. I’m sure there are outliers, is all. 😉