3 ms·
Why leave out the first 2/3rds of the sentence, which are the more severe ramifications of the exploit? >From there the attacker can track the vehicle’s locati
by qualeed 1y ago
Why leave out the first 2/3rds of the sentence, which are the more severe ramifications of the exploit?
>From there the attacker can track the vehicle’s location, record audio from inside the car, and obtain the victim’s phonebook data.
Combined with:
>"In some cases pairing is possible without any user interaction"
You end up with a stalker's dream.
- 4ndrewl 1y agoBut also you're potentially able to backdoor in if future vulnerabilities are found. One foot in the door so to speak.
- flerchin 1y agoIt's a local attack via bluetooth, location tracking is not very interesting. Recording audio likewise not all that exciting for much the same reason. The phonebook though, that's exfiltrating PII. >In some cases pairing is possible without any user interaction. Baloney. No implementations in the wild do this, or they would have loudly trumpeted it.
- qualeed 1y agoI can turn any security finding into a "yawn" by either ignoring and/or disbelieving most of it, too.