Scientist banned from revealing codes used to start luxury cars

[grober]

Thread subject as per title really. The high court imposed an injunction on the University of Birmingham's Flavio Garcia, a lecturer in computer science, who has cracked the security system used by such cars as Porsches, Audis, Bentleys and Lamborghinis . The cars are protected by the system called Megamos Crypto, an algorithm which works out the codes that are sent between the key and car that allows the car to verify the identity of the ignition key. Scientist banned from revealing codes used to start luxury cars | Technology | guardian.co.uk.
As usual it poses the question -how secure is your car. If cars are developed to the extent they can supposedly only be started with the keys - which you as the owner are responsible for- what happens if the car is " hacked" and stolen. Places the owner in a potentially liable insurance position because "on paper" at least the car can't be stolen without the access to the proper keys.

 

[Spin_bowler]

Seems it's not just cars. Read here about Barnaby Jack who has just died who was going to show how a pacemaker could be hacked with potentially fatal consequences.

BBC News - Elite hacker Barnaby Jack dies ahead of Black Hat event

 

[m1br]

Thread subject as per title really. The high court imposed an injunction on the University of Birmingham's Flavio Garcia, a lecturer in computer science, who has cracked the security system used by such cars as Porsches, Audis, Bentleys and Lamborghinis . The cars are protected by the system called Megamos Crypto, an algorithm which works out the codes that are sent between the key and car that allows the car to verify the identity of the ignition key. Scientist banned from revealing codes used to start luxury cars | Technology | guardian.co.uk.
As usual it poses the question -how secure is your car. If cars are developed to the extent they can supposedly only be started with the keys - which you as the owner are responsible for- what happens if the car is " hacked" and stolen. Places the owner in a potentially liable insurance position because "on paper" at least the car can't be stolen without the access to the proper keys.

Most BMW owners with a PC are now well aware how easily the E90 series (and others) can be removed with a laptop.

In fact its epidemic in larger cities. And plenty of threads on E90Post etc.

The OBD2 ports are near the driver knee, and out of range of the microwave alarm system.
All that is required is an OBD2 interface, laptop and a key (any key).
Access by opening or breaking the drivers window, reach in, plug in and program the car with this key code.
Unlock car, insert key, drive away.

All items easily obtainable over the internet.

Steve

 

[moonloops]

Well if my car runs over a blind black lesbian outside an orphanage after I've had a few drinks I will be sure to blame it on Flavio Garcia..

 

[Dieselman]

If cars are developed to the extent they can supposedly only be started with the keys - which you as the owner are responsible for- what happens if the car is " hacked" and stolen. Places the owner in a potentially liable insurance position because "on paper" at least the car can't be stolen without the access to the proper keys.

Surely, the fact that the owner has all the keys means the liability isn't theirs.

 

[Colin_b]

Surely, the fact that the owner has all the keys means the liability isn't theirs.

Correct.

The fact cars can be stolen means they will be. 30 minutes searching on the internet will give you the full instructions on how to steal a car. Or hack, or make drugs or buy stolen credit card details. The encoding algorithm the OP refers to will be there within a month.

Perhaps we need an opt in for that as well as porn.