Slashdot Mirror
GM Performs Stealth Update To Fix Security Bug In OnStar
An anonymous reader writes: Back in 2010, long before the Jeep Cherokee thing, some university researchers demonstrated remote car takeover via cellular (old story here). A new Wired article reveals that this was actually a complete exploit of the OnStar system (and was the same one used in that 60 Minutes car hacking episode last year). Moreover, these cars stayed vulnerable for years -- until 2014, when GM created a remote update capability and secretly started pushing updates to all the affected cars.
The only fix for the security problems with Onstar and any similar system is total removal of the hardware and software!!!!!
From GM chief product cybersecurity officer Jeff Massimilla:
“We were able to find a way to deliver over-the-air updates on a system that was not necessarily designed to do so.”
They hacked it so they could hack it. I'm glad GM has my back.
It is unwise to ascribe motive