Star Trek Website
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
InevitableSwing [none/use name]@hexbear.net to technology@hexbear.netEnglish ·
edit-2
2 years ago

Millions of Kias could be hacked and tracked thanks to a simple website bug that allows attackers to track cars, unlock doors, and start engines at will.

hexbear.net

message-square
27
link
fedilink
141

Millions of Kias could be hacked and tracked thanks to a simple website bug that allows attackers to track cars, unlock doors, and start engines at will.

hexbear.net

InevitableSwing [none/use name]@hexbear.net to technology@hexbear.netEnglish ·
edit-2
2 years ago
message-square
27
link
fedilink

https://archive.ph/i3X1L

alert-triangle
You must log in or # to comment.
  • ∞ 🏳️‍⚧️Edie [it/its, she/her, fae/faer, love/loves, ze/hir, des/pair, none/use name, undecided]@hexbear.net
    link
    fedilink
    English
    arrow-up
    41
    ·
    2 years ago

    Why is everything internet connected? Oh yea, I want my stove top to beinternet connected - statements I wish I could say have never been uttered.

    • ∞ 🏳️‍⚧️Edie [it/its, she/her, fae/faer, love/loves, ze/hir, des/pair, none/use name, undecided]@hexbear.net
      link
      fedilink
      English
      arrow-up
      35
      ·
      2 years ago

      BTW, yea, we got a new stove top it had a WiFi sticker on it agony-consuming WHY. It came with a paper where they had printed licenses, I didn’t look at it too much, but I saw “openbsd”, WHY IS MY STOVETOP RUNNING OPENBSD SOFTWARE agony-immense

      • O__O [none/use name]@hexbear.net
        link
        fedilink
        English
        arrow-up
        29
        ·
        2 years ago

        At least it isn’t running windows. 🤷‍♀️

      • Zvyozdochka [she/her, pup/pup's]@hexbear.net
        link
        fedilink
        English
        arrow-up
        21
        ·
        2 years ago

        Probably ships with OpenSSL and/or OpenSSH. Buying a cheap CH341A programmer off of Aliexpress is a lot of fun because you can actually dump the firmware from like 95% of these things with a $5 tool and poke around/reverse engineer them and do some fun things with that knowledge.

      • tactical_trans_karen [she/her, comrade/them]@hexbear.net
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 years ago

        If you learn how to set auto start and stop timers, it defeats the convenience of an app. Shit really isn’t that hard.

    • Boredom [none/use name]@hexbear.net
      link
      fedilink
      English
      arrow-up
      23
      ·
      2 years ago

      The counter revolution will probably be accompanied by the government killing every spouse or parent of someone too busy to cook on a thursday by blowing them up right after popping in pizza pockets.

  • UlyssesT [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    38
    ·
    2 years ago

    The bazinga shit is just about mandatory whether people want it or not. The real inevitabilism is a matter of market manipulation by the ruling class, eliminating choices that don’t contribute to the real profit motive: data gathering and aggregation.

    • Mardoniush [she/her]@hexbear.net
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      1
      ·
      2 years ago

      But they’re gathering the data to sell to use on the other guy’s Bazinga thing, now advertising has mostly collapsed. It’s like a city amateur theatre community, no one actually see the shows that aren’t in them, they’re just passing the same sad $20 note around in a circle. A fully closed bazinga loop that produces nothing, not even useless stuff.

      • AmericaDelendaEst [comrade/them]@hexbear.net
        link
        fedilink
        English
        arrow-up
        13
        ·
        2 years ago

        A fully closed bazinga loop that produces nothing, not even useless stuff.

        yeah, that’s the american economy

  • Mardoniush [she/her]@hexbear.net
    link
    fedilink
    English
    arrow-up
    29
    ·
    2 years ago

    Plot twist, the attackers are Kias

    • PointAndClique [they/them]@hexbear.net
      link
      fedilink
      English
      arrow-up
      19
      ·
      2 years ago

      Kia KIA by kia

      • miz [any, any]@hexbear.net
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        1
        ·
        2 years ago

        at IKEA

  • SpiderFarmer [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    23
    ·
    2 years ago

    Classic Kia.

  • NephewAlphaBravo [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    15
    ·
    2 years ago

    A couple years back there was a thing where you could hotwire some Kia models just by jamming a usb plug into a thing on the steering column. Glad to see the brand identity still going strong.

    • DengistDonnieDarko [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      14
      ·
      2 years ago

      that’s how my car got stolen!

      when you take the ignition protector off, there’s a small square piece of metal that you can put a USB plug onto, or just use a set of pliers or something. then, simply press in and turn like an actual key, and presto, you now own a car.

    • Dem Bosain@midwest.socialBanned
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 years ago

      It didn’t necessarily have to be a USB plug, that was just a convenient device because it was the right shape and size. A large flat screwdriver would work just as well.

      • LanyrdSkynrd [comrade/them, any]@hexbear.net
        link
        fedilink
        English
        arrow-up
        8
        ·
        2 years ago

        Yeah, it was just Kia cheaping out by not having an immobilizer. They saved at the very most $100 a car(probably more like $40) by skipping a basic security feature invented in 1985.

    • ihaveibs [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 years ago

      Still very much an ongoing thing that they will face basically no repercussions for

  • makotech222 [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    14
    ·
    2 years ago

    me, sweating in my hyundai phoenix-sweat

  • chungusamonugs [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    13
    ·
    2 years ago

    Back in the day there was a key that you turn and starts your car. Easy to steal. So manufacturers created keys with 4 rows of pins in the ignition. Hard to steal if you don’t know what you’re doing.

    Then they moved to inductive transponder keys. Also not really an issue, but not as reliable as the older style keys.

    Then some sick fucks said “why not make the transponder on the FUCKING KEY FOB” instead of the car itself which has a giant lead acid battery with millions of amp hours and here we are i-love-not-thinking

    • UlyssesT [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      14
      ·
      2 years ago

      Techbros sometimes want to change things because they convince themselves that all changes are smart and cool and “disruptive” without knowing why things were the way they were in the first place. bazinga

      • SuperZutsuki [they/them]@hexbear.net
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 years ago

        BILLIONS MUST BE DISRUPTED

  • GrouchyGrouse [he/him]@hexbear.net
    link
    fedilink
    English
    arrow-up
    12
    ·
    2 years ago

    Oh great, this totally won’t get somebody hurt or killed. Good job, guys!

  • Arthur Besse@lemmy.ml
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 years ago

    https://archive.ph/i3X1L

    for anyone who doesn’t want to solve the captcha, that’s an archive of https://www.wired.com/story/kia-web-vulnerability-vehicle-hack-track

    …which contains a summary of what is in the researchers’ post about it here: https://samcurry.net/hacking-kia

  • tactical_trans_karen [she/her, comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 years ago

    Alternative title: Get free remote start on your KIA with this one simple trick!

    • hotcouchguy [he/him]@hexbear.net
      link
      fedilink
      English
      arrow-up
      10
      ·
      2 years ago

      Free remote start on your free kia

  • Sulvor [he/him, undecided]@hexbear.net
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 years ago

    We call them The Kia Boys around here. I have a buddy that has been a victim twice.

technology@hexbear.net

technology@hexbear.net

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@hexbear.net

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

  • Ways to run Microsoft/Adobe and more on Linux
  • The Ultimate FOSS Guide For Android
  • Great libre software on Windows
  • Hey you, the lib still using Chrome. Read this post!

Rules:

  • 1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
  • 2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
  • 3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
  • 4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
  • 5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
  • 6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
  • 7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 21 users / day
  • 317 users / week
  • 919 users / month
  • 337 users / 6 months
  • 13 local subscribers
  • 23.3K subscribers
  • 1.48K Posts
  • 18.7K Comments
  • Modlog
  • mods:
  • Jadzia_Dax [she/her]@hexbear.net
  • blashork [she/her]@hexbear.net
  • context [fae/faer, fae/faer]@hexbear.net
  • EmmaGoldman [she/her, comrade/them]@hexbear.net
  • SexUnderSocialism [she/her]@hexbear.net
  • gaycomputeruser [she/her]@hexbear.net
  • ZoomeristLeninist [comrade/them, she/her]@hexbear.net
  • BE: 0.19.18
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org