3 ms·
Actually, that is not really a car hack. He intercepted the communication from the app. So it is an app hack like we have seen numerous times. It my be differe
by PinguTS 11y ago
Actually, that is not really a car hack.
He intercepted the communication from the app. So it is an app hack like we have seen numerous times. It my be different, but it sound like cookie stealing what was possible with the Facebook app and the Instagram app. Then with those credentials you can do all those things that you are supposed to do like if you where the legit user.
All those functions are functions supposed to be done by the app. So there is no hacking on the car side done. The interesting piece of information would be: can that be used to actually hack the car?
- travelton 11y agoHaving purchased an internet connected Hyundai (via their BlueLink service)... I've been curious whether I can access the vehicle directly through it's internet connection. So far, sniffing the packets from the iOS BlueLink app, it appears to broker requests through a service by Covisint [http://www.covisint.com/ http://www.covisint.com/]. From there, I cannot figure out how the vehicle communicates to receive these messages. The payloads between iOS and Covisint contain tons of information about the vehicle, but nothing that exposes the communications between the vehicle and BlueLink or Covisint. The vehicle has the ability to connect to Wifi... I will prod at that next. :)
- michaelt 11y agoFrom there, I cannot figure out how the vehicle communicates to receive these messages. Prediction: 3G/4G, with specific settings on the SIM giving it access to a private APN.
- JonathonW 11y agoAnd, if you're lucky, it's connecting to a private IP network. The Chrysler hack was possible because the cars' built-in cell connection [i]wasn't[/i] connecting to a private network; the cars were unfirewalled and accessible to anything else that happened to be on Sprint's cellular data network.