GM Performs Stealth Update To Fix Security Bug In OnStar

An anonymous reader writes: Back in 2010, long before the Jeep Cherokee thing, some university researchers demonstrated remote car takeover via cellular (old story here). A new Wired article reveals that this was actually a complete exploit of the OnStar system (and was the same one used in that 60 Minutes car hacking episode last year). Moreover, these cars stayed vulnerable for years -- until 2014, when GM created a remote update capability and secretly started pushing updates to all the affected cars.

Comments

This is not reassuring

[beschra]

From GM chief product cybersecurity officer Jeff Massimilla:

“We were able to find a way to deliver over-the-air updates on a system that was not necessarily designed to do so.”

They hacked it so they could hack it. I'm glad GM has my back.